# v0.4.1

## Fixes

- **Fix Landlock breaking bwrap startup** — Landlock was applied before building the bwrap command, so mount discovery couldn't read `$HOME` ("Permission denied"). Also `/proc` was read-only, but bwrap needs to write `/proc/self/uid_map` for user namespace setup. Landlock is now applied after building the command but before spawning, and `/proc` is read-write.

- **Fix flaky tests from parallel env/cwd mutation** — Tests that call `set_current_dir()` or mutate `BWRAP_BIN` env var could race each other since both are process-global. Added static mutexes to serialize them.
