Finding / cursor

2026-10-24-cursor-git-read-hardening-and-untracked-instruction-checks-have-reached-the-default-cli-artifact

Git-read hardening and untracked-instruction checks have reached the default CLI artifact. The current git wrapper inserts --no-ext-diff --no-textconv for diff, show, blame, log and whatchanged and removes conflicting flags. Reused checkouts receive extra ls-files --others checks for agent configuration, including a second path for selected ignored configuration; leftovers refuse reuse. The IDE 3.25 notes separately report external-diff/textconv hardening, trusted-link wildcard repair and admin repository-blocklist handling. These are specified execution paths, not a blanket statement that opening any repository cannot execute code.

Channel: tagged-release. Half: defect. Date: 2026-10-22 default artifact; IDE notes 2026-10-14.

Operator consequence: Upgrade workers still on the parent default and repeat a dirty-checkout qualification before sharing pools across trust levels. Two previously lab-only profile claims can become current-default observations. Fewer stale instructions should reduce cross-job contamination and manual cleanup, but no cleanup run was executed, and this comparison does not settle the separate git fsmonitor allegation.

Receipt

Finding metadata

Run: 2026-10-24-weekly-digest-2026-10-13_2026-10-24-frontier-v0

Finding ID: 2026-10-24-cursor-git-read-hardening-and-untracked-instruction-checks-have-reached-the-default-cli-artifact

Profile citations

  • cursor / claim / default-git-read-and-reuse-checks

Source links

Primary links, including exact changelog lines when available.