Antigravity widened what one approval covers, in a product with no source to check it against
1.1.9 records that "a pattern approved at a prompt is recorded for the rest of the conversation, letting later commands that match it run without prompting again." Several harnesses on this watchlist behave the same way, and the design is defensible. What is specific here is that the successor to the CLI Google retired publishes no source: the repository holds .github, CHANGELOG.md, README.md, a demo gif and examples, carries no license, and GitHub detects no primary language. That changelog sentence is the entire available description of the new boundary, and what counts as a matching pattern cannot be established from anything published.
What this changes for operators
- Approving one command in Antigravity now approves later commands matching the same pattern for the remainder of the conversation. Treat each approval as scoped to the conversation rather than the command, and start a new conversation to reset the grant.
Run: 2026-08-03-weekly-digest-2026-07-27_2026-08-03-frontier-v0
Schema: bitter.frontier_signals.v0 / ID: 2026-08-03-antigravity-approval-scope-widens-with-nothing-to-read
Research evidence and publication history are open in the repository.