Hacker News·4 min read·medium
Git worktrees are not an isolation boundary for coding agents
A
alchaplinsky
✦AI Summary
The author argues that Git worktrees do not provide a secure isolation boundary for AI coding agents, as they share critical repository state. The post warns that agents can manipulate hooks and commit identities if given access to a worktree.
Most tools that run AI coding agents in parallel give each one a git worktree. A worktree shares refs, config, stash and hooks with your real repository. Paste-and-run repros showing an agent can execute code in your main repo and rewrite your commit identity, plus benchmarks showing a properly isolated clone costs the same.
technologybusiness
✦
Get the full story
Sign up for Headlinne to unlock AI insights, political bias analysis, and your personalized news feed.
Create free accountAlready have an account? Sign in