Evidence record / cursor
A dated record of one change, kept so the writing that cites it can be checked. Compiled from the sources listed below by the research run, not written for reading. The judgment lives in the issues that cite it, below.
2026-10-13-cursor-lab-git-reads-disable-external-diff-and-text-conversion-programs-in-the-inspected-artifact
Lab git reads disable external diff and text conversion programs in the inspected artifact. The inspected lab wrapper suppresses repository-controlled external diff and text-conversion execution for five git read operations. The recorded default artifact lacks that transformation. This narrows an execution path; it does not establish a fix for the September fsmonitor allegation.
Channel: preview-or-beta relative to the researcher’s October 13 morning lab snapshot. Half: defect. Date: 2026-10-12 artifact.
Operator consequence: Verify the wrapper in the actual worker or CLI build before relying on this hardening. This is no all-day default-channel guarantee and no blanket sandbox-safety claim. An advisory or tested reproduction tied to a build is needed to settle the different fsmonitor question.
Receipt
Finding metadata
Run: 2026-10-13-profile-refresh-2026-09-21_2026-10-13-frontier-v0
Finding ID: 2026-10-13-cursor-lab-git-reads-disable-external-diff-and-text-conversion-programs-in-the-inspected-artifact
Profile citations
- cursor / claim / lab-git-read-hardening
Source links
Primary links, including exact changelog lines when available.
- official docs2026-10-13-cursor-lab-git-reads-disable-external-diff-and-text-conversion-programs-in-the-inspected-artifactdownloads.cursor.com/lab/2026.10.12-d47ca18/darwin/arm64/agent-cli-package.tar.gzofficial docs2026-10-13-cursor-lab-git-reads-disable-external-diff-and-text-conversion-programs-in-the-inspected-artifactdownloads.cursor.com/lab/2026.10.01-e373342/darwin/arm64/agent-cli-package.tar.gz
Versioned source: run artifact