Bitter Frontier What coding agents just made possible, where the bottleneck moved, and what deserves attention.

Evidence record / cursor

A dated record of one change, kept so the writing that cites it can be checked. Compiled from the sources listed below by the research run, not written for reading. The judgment lives in the issues that cite it, below.

2026-10-24-cursor-the-default-cli-adds-a-restricted-git-executor-that-can-refuse-repository-configured-progr

The default CLI adds a restricted Git executor that can refuse repository-configured programs. The called no-repo-programs executor permits a fixed set of Git verbs, rejects help and unsafe submodule/worktree flags, pins configuration, disables lazy fetch and interactive helpers, and reads filter configuration where necessary to disable repository filters or refuse the operation. Local-exec and generated-file detection call it; this is additional to section 6.

Channel: tagged-release. Half: both. Date: 2026-10-22 artifact.

Operator consequence: Qualify custom-filter, submodule and unusual-worktree repositories: a read can now return an explicit refusal. Existing fsmonitor overrides predate this executor, so this is neither an fsmonitor affected/fixed pair nor a blanket Git-execution guarantee.

Receipt

Finding metadata

Confidence
high

Run: 2026-10-24-weekly-digest-2026-10-13_2026-10-24-frontier-v0

Finding ID: 2026-10-24-cursor-the-default-cli-adds-a-restricted-git-executor-that-can-refuse-repository-configured-progr

Profile citations

  • cursor / claim / restricted-git-executor

Source links

Primary links, including exact changelog lines when available.

  1. Cursor
    official docs2026-10-24-cursor-the-default-cli-adds-a-restricted-git-executor-that-can-refuse-repository-configured-progrdownloads.cursor.com/lab/2026.10.22-27dcf5f/darwin/arm64/agent-cli-package.tar.gzofficial docs2026-10-24-cursor-the-default-cli-adds-a-restricted-git-executor-that-can-refuse-repository-configured-progrdownloads.cursor.com/lab/2026.10.01-e373342/darwin/arm64/agent-cli-package.tar.gzofficial docs2026-10-24-cursor-the-default-cli-adds-a-restricted-git-executor-that-can-refuse-repository-configured-progrdownloads.cursor.com/lab/2026.10.12-d47ca18/darwin/arm64/agent-cli-package.tar.gz

Versioned source: run artifact