Finding / gemini-cli
2026-09-21-gemini-cli-build-file-edit-gate-is-preview-only-at-close
v0.61.0-preview.0 (2026-09-15) makes build and test runs require confirmation after the agent has edited a build file such as package.json or a Makefile (PR 29250), and refuses to launch the sandbox from sensitive directories (PR 29214). Neither is in stable v0.60.0. ACP emitting a pending tool_call before request_permission (PR 29439) is on main only at window close.
Channel: preview-or-beta (v0.61.0-preview.0 only). Half: both.
Operator consequence: On stable 0.60.0 an agent-edited package.json script can still run under a previously approved build command. Pin @preview only if you want this gate now.
Receipt
Finding metadata
Run: 2026-09-21-weekly-digest-2026-08-20_2026-09-21-frontier-v0
Finding ID: 2026-09-21-gemini-cli-build-file-edit-gate-is-preview-only-at-close
Profile citations
- Gemini CLI / claim / build-file-gate-preview-only
- Gemini CLI / posture / governance
Source links
Primary links, including exact changelog lines when available.