From ce17021b5891703b7ff7507d3efa9339512661f1 Mon Sep 17 00:00:00 2001
From: ollie <ollie@local>
Date: Sun, 3 May 2026 22:10:15 +0200
Subject: [PATCH] require landrun for execute_code, update docs

Update core submodule: WrapCommand returns a hard error when landrun
is not detected. Document the requirement in ARCHITECTURE.md.
---
 core                | 2 +-
 doc/ARCHITECTURE.md | 4 ++++
 2 files changed, 5 insertions(+), 1 deletion(-)

diff --git a/core b/core
index 6422c36..36d3021 160000
--- a/core
+++ b/core
@@ -1 +1 @@
-Subproject commit 6422c365b7002e1577ed490adb8c7c8c36fcbfc3
+Subproject commit 36d3021aae2e140cba23a0f623ec034bef0257ff
diff --git a/doc/ARCHITECTURE.md b/doc/ARCHITECTURE.md
index dac0233..1513ab5 100644
--- a/doc/ARCHITECTURE.md
+++ b/doc/ARCHITECTURE.md
@@ -225,6 +225,10 @@ Sandboxing is applied specifically to `execute_code`. Each code step is wrapped
 `~/.config/ollie/sandbox/<name>.yaml`; if no `sandbox` argument is passed in the
 `execute_code` call, the `default` config is used.
 
+**landrun is required.** If landrun is not installed or not in `PATH`,
+`execute_code` will refuse to run and return a hard error. There is no
+unsandboxed fallback.
+
 Steps marked `elevated: true` run outside the sandbox via the elevation backend
 (`x/elevate`) and are the only exception. All other steps are sandboxed unconditionally.