Evidence record / pi-coding-agent

A dated record of one change, kept so the writing that cites it can be checked. Compiled from the sources listed below by the research run, not written for reading. The judgment lives in the signals and issues that cite it, below.

Git package installation path traversal protection

What Changed

Added decodeForValidation() and hasUnsafeGitInstallPart() functions to reject git URLs with directory traversal sequences (.., null bytes, backslashes, leading slashes) at parse time. Implemented resolveManagedPath() in package manager to verify all resolved paths remain within their designated root directories.

Operator Implication

Prevents attackers from escaping package install directories via crafted git URLs. Defense-in-depth validates at both parsing and path resolution stages.

Receipt

Commit a98e087 ‘fix(coding-agent): harden git package install paths’ implements defense-in-depth validation rejecting traversal attempts like ‘../../victim/repo

Finding metadata

Confidence: high
Actionability: test
Accessibility impact: none

Run: 2026-06-03-weekly-digest-2026-05-28_2026-06-03-frontier-v0

Finding ID: 2026-06-02-pi-coding-agent-git-path-traversal

Accepted signals

Git package install path-traversal rejection / 2026-06-03

Source links

Primary links, including exact changelog lines when available.

Pi Coding Agent
commitCommit a98e087 'fix(coding-agent): harden git package install paths' implements defense-in-depth validation rejecting traversal attempts like '../../victim/repo' and throws 'Refusing to use path outsigithub.com/earendil-works/pi/commit/a98e087

Versioned source: run artifact