diff --git a/.hop/records/prompts/P_06FN8AMC0CHRKDYMD9W87D8.json b/.hop/records/prompts/P_06FN8AMC0CHRKDYMD9W87D8.json
new file mode 100644
index 0000000..f946ae1
--- /dev/null
+++ b/.hop/records/prompts/P_06FN8AMC0CHRKDYMD9W87D8.json
@@ -0,0 +1,17 @@
+{
+  "id": "P_06FN8AMC0CHRKDYMD9W87D8",
+  "task_id": "T_06FN8AMC0DGD5KW499HBX88",
+  "attempt_id": "AT_06FN8AMC0CCZXK2BZZ64DTG",
+  "state_id": "P_06FN8AMC0CHRKDYMD9W87D8",
+  "prompt": "lets just leave it named as actions, and i think we need to let anyone use it if we are going to try and attract users.",
+  "agent_name": "codex",
+  "status": "proposed",
+  "response_summary": "Run the nested rootless Actions daemon with its required container privileges",
+  "created_at": "2026-07-12T02:31:42.33901Z",
+  "metadata": {
+    "source_tree": "dffc747dce1df9e8e16287143feab5958d727e79",
+    "git_commit": "3dbebbbf1c2b01b69baf771b3171bdc89f08a716",
+    "attempt_head": "C_06FN8AR954CQ0BKRDJJ3E0G",
+    "attempt_head_kind": "checkpoint"
+  }
+}
diff --git a/compose.yaml b/compose.yaml
index f8969b3..3fbd62a 100644
--- a/compose.yaml
+++ b/compose.yaml
@@ -60,9 +60,9 @@ services:
     cpus: "2.0"
     mem_limit: 4g
     pids_limit: 1024
-    security_opt:
-      - seccomp:unconfined
-      - apparmor:unconfined
+    # Required by rootlesskit for the nested Docker daemon. Workflow jobs run
+    # inside that daemon and never receive the host's Docker socket.
+    privileged: true
     volumes:
       - actions-runner-data:/data
     networks: [hopweb]