Evidence record / gemini-cli
A dated record of one change, kept so the writing that cites it can be checked. Compiled from the sources listed below by the research run, not written for reading. The judgment lives in the issues that cite it, below.
2026-10-13-gemini-cli-build-file-tool-gates-reach-stable-and-override-yolo
Build-file tool gates reach stable and override YOLO. Recognized edit-tool calls with an extractable file_path, path, filePath or file target now ask for confirmation when the target is a recognized build/dependency file, including package.json, package-lock.json, pnpm-lock.yaml, yarn.lock, bun.lockb, Makefile, pyproject.toml, go.mod, Cargo.toml, Dockerfile and the other exact names/extensions in buildFileUtils.ts. The Bun entry is bun.lockb, not all Bun lockfiles. These gates override ALLOW in YOLO and trusted workspaces, and become DENY when non-interactive. After a tracked build-file edit, recognized build/test commands ask again and cannot become always-allow. Untrusted-output argument checks also run before shell YOLO bypass, with stable v0.64.0 narrowing their matcher (section 4). This is tool-path enforcement, not a prohibition on all filesystem writes: the YOLO shell rule permits redirection. It does not close every injection-to-build path.
Channel: tagged-release. Half: both. Date: 2026-09-23.
Operator consequence: Headless dependency/config-edit jobs using the recognized edit tools can be denied even with YOLO. Move those steps to explicit automation or interactive review, and test the actual tools/commands your job uses. Preserve a filesystem or sandbox boundary when a file must be unwritable; an edit-tool gate alone is insufficient. The benefit is a deliberate confirmation point on the tracked edit-to-build path, with a compatibility cost for unattended jobs.
Receipt
- https://github.com/google-gemini/gemini-cli/releases/tag/v0.61.0
- https://github.com/google-gemini/gemini-cli/pull/29250
- https://github.com/google-gemini/gemini-cli/blob/v0.64.0/packages/core/src/policy/policy-engine.ts#L903-L956
- https://github.com/google-gemini/gemini-cli/blob/v0.64.0/packages/core/src/utils/buildFileUtils.ts#L14-L71
- https://github.com/google-gemini/gemini-cli/blob/v0.64.0/packages/core/src/policy/policies/yolo.toml#L50-L56
- https://github.com/google-gemini/gemini-cli/blob/v0.63.0/packages/core/src/policy/policy-engine.test.ts#L4290-L4335
- https://github.com/google-gemini/gemini-cli/blob/v0.63.0/packages/core/src/tools/shell.ts#L272-L325
Finding metadata
Run: 2026-10-13-profile-refresh-2026-09-21_2026-10-13-frontier-v0
Finding ID: 2026-10-13-gemini-cli-build-file-tool-gates-reach-stable-and-override-yolo
Profile citations
- Gemini CLI / claim / stable-build-file-tool-gates
- Gemini CLI / posture / governance
Source links
Primary links, including exact changelog lines when available.
- github release2026-10-13-gemini-cli-build-file-tool-gates-reach-stable-and-override-yologoogle-gemini/gemini-cli / v0.61.0merged pr2026-10-13-gemini-cli-build-file-tool-gates-reach-stable-and-override-yologithub.com/google-gemini/gemini-cli/pull/29250tagged commit file2026-10-13-gemini-cli-build-file-tool-gates-reach-stable-and-override-yologoogle-gemini/gemini-cli / packages/core/src/policy/policy-engine.ts#L903-L956tagged commit file2026-10-13-gemini-cli-build-file-tool-gates-reach-stable-and-override-yologoogle-gemini/gemini-cli / packages/core/src/utils/buildFileUtils.ts#L14-L71tagged commit file2026-10-13-gemini-cli-build-file-tool-gates-reach-stable-and-override-yologoogle-gemini/gemini-cli / packages/core/src/policy/policies/yolo.toml#L50-L56tagged commit file2026-10-13-gemini-cli-build-file-tool-gates-reach-stable-and-override-yologoogle-gemini/gemini-cli / packages/core/src/policy/policy-engine.test.ts#L4290-L4335tagged commit file2026-10-13-gemini-cli-build-file-tool-gates-reach-stable-and-override-yologoogle-gemini/gemini-cli / packages/core/src/tools/shell.ts#L272-L325
Versioned source: run artifact