Evidence record / agent-zero
A dated record of one change, kept so the writing that cites it can be checked. Compiled from the sources listed below by the research run, not written for reading. The judgment lives in the issues that cite it, below.
2026-10-13-agent-zero-file-patches-preserve-metadata-and-new-backups-exclude-orchestrator-state
File patches preserve metadata and new backups exclude Orchestrator state. The three editor patch methods now preserve existing mode and, when root, owner/group before replacement, instead of producing root-owned 0600 replacements on bind mounts. New backup patterns exclude usr/plugins/_orchestrator/data/** alongside Time Travel history; saved custom patterns are not rewritten. usr/** still includes hidden credentials, chat histories and durable host Computer Use screenshots. Orchestrator supplies adapters/guidance for Codex, Claude Code, Cursor CLI, Gemini CLI, Grok Build, Hermes Agent and OpenCode; it does not bundle proof that those CLIs are installed. Its documented Codex command bypasses approvals and sandbox, and its non-root Claude example uses bypassPermissions. This makes the execution environment, not the child CLI’s ordinary prompts, the relevant delegation boundary.
Channel: tagged-release. Half: both. Date: 2026-09-23 (first stable; implementations 2026-09-14 and 2026-09-23).
Operator consequence: Repair owners and executable bits on files already damaged by older editor patches. Treat backups as credential archives and inspect saved include/exclude patterns; earlier backups can contain Orchestrator sign-in state. Before delegating to a coding CLI, inspect the actual command and choose host versus container deliberately. Do not assume selecting a familiar child agent restores its default sandbox or permission prompts.
Receipt
- https://github.com/agent0ai/agent-zero/commit/e9384d27483b8260994487f6e898aeaad02bc954
- https://github.com/agent0ai/agent-zero/commit/a5feaec431a8da615dc4f624a6ae55417b7c8ace
- https://github.com/agent0ai/agent-zero/blob/v2.14/helpers/backup.py#L55-L68
- https://github.com/agent0ai/agent-zero/blob/v2.14/helpers/chat_media.py#L24-L38
- https://github.com/agent0ai/agent-zero/blob/v2.14/plugins/_a0_connector/tools/computer_use_remote.py#L910-L946
- https://github.com/agent0ai/agent-zero/blob/v2.14/plugins/_orchestrator/README.md#L25-L36
- https://github.com/agent0ai/agent-zero/blob/v2.14/plugins/_orchestrator/README.md#L82-L97
Finding metadata
Run: 2026-10-13-profile-refresh-2026-09-21_2026-10-13-frontier-v0
Finding ID: 2026-10-13-agent-zero-file-patches-preserve-metadata-and-new-backups-exclude-orchestrator-state
Profile citations
- Agent Zero / claim / file-metadata-and-backup-scope
- Agent Zero / claim / orchestrator-child-cli-bypass
- Agent Zero / posture / governance
Source links
Primary links, including exact changelog lines when available.
- commit2026-10-13-agent-zero-file-patches-preserve-metadata-and-new-backups-exclude-orchestrator-stategithub.com/agent0ai/agent-zero/commit/e9384d27483b8260994487f6e898aeaad02bc954commit2026-10-13-agent-zero-file-patches-preserve-metadata-and-new-backups-exclude-orchestrator-stategithub.com/agent0ai/agent-zero/commit/a5feaec431a8da615dc4f624a6ae55417b7c8acetagged commit file2026-10-13-agent-zero-file-patches-preserve-metadata-and-new-backups-exclude-orchestrator-stateagent0ai/agent-zero / helpers/backup.py#L55-L68tagged commit file2026-10-13-agent-zero-file-patches-preserve-metadata-and-new-backups-exclude-orchestrator-stateagent0ai/agent-zero / helpers/chat_media.py#L24-L38tagged commit file2026-10-13-agent-zero-file-patches-preserve-metadata-and-new-backups-exclude-orchestrator-stateagent0ai/agent-zero / plugins/_a0_connector/tools/computer_use_remote.py#L910-L946tagged commit file2026-10-13-agent-zero-file-patches-preserve-metadata-and-new-backups-exclude-orchestrator-stateagent0ai/agent-zero / plugins/_orchestrator/README.md#L25-L36tagged commit file2026-10-13-agent-zero-file-patches-preserve-metadata-and-new-backups-exclude-orchestrator-stateagent0ai/agent-zero / plugins/_orchestrator/README.md#L82-L97
Versioned source: run artifact