buildConfirmed5 publishers Anthropic built a new source-control system, Scion, after daily merges rose from about 2,500 in May 2026 to over 30,000 in September. A dev.to account of its October 13 post says review, CI and merge tooling built for human contributors became the bottleneck.
Perspective Coverage
5 publishers
- Builder
- Builder 48%
- Operator
- Operator 37%
- Investor
- Investor 15%
Reality
- Evidence58
- Adoption
- Not scored
- Hype gap+14
- Incentives55
- Confidence68
buildOne report1 publisher A one-commit checkout and a trailing || true let 41 PRs skip tests under green CI
GitHub Actions' default one-commit checkout let 41 pull requests skip their tests over three weeks while CI stayed green, a dev.to author reports. The author's change-detection step read git's fatal error as an empty diff, and the run that exposed it showed a test job that finished in 4 seconds.
Reality
- Evidence62
- Adoption
- Not scored
- Hype gap+6
- Incentives
- Not scored
- Confidence60
buildOne report1 publisher A repo's .git/config can make a coding agent's background git call run any command
Manifold Security's GitSpawn lets a repo's .git/config run any command through a coding agent's background git calls, with no approval prompt. It needs the repo to arrive as files, since git clone never carries that config; a client's zip will do.
Reality
- Evidence58
- Adoption
- Not scored
- Hype gap+8
- Incentives35
- Confidence55
buildOne report1 publisher Listing git push in a Claude Code subagent's disallowedTools removed all of Bash in 10 of 10 launches
Claude Code 2.1.289 removed all of Bash from a subagent in 10 of 10 launches when disallowedTools listed Bash(git push *), according to a dev.to test. The docs predicted that result, and they say the settings deny rule they offer instead is not a security boundary.
Reality
- Evidence60
- Adoption
- Not scored
- Hype gap0
- Incentives
- Not scored
- Confidence58
buildOne report1 publisher Anthropic's Windows app carries gated code that gives each added repo its own Claude Code worktree
Anthropic's Windows app 2.31226.0.0 holds gated code giving each repo in a Claude Code session its own Git worktree, RuntimeWire found. Two feature gates keep the controls hidden, so the package shows the workflow's design but not when it ships.
Reality
- Evidence40
- Adoption
- Not scored
- Hype gap0
- Incentives
- Not scored
- Confidence45
GitHub rebuilds Git hosting on Azure Blob Storage after commits grow fivefold
GitHub is moving Git onto Azure Blob Storage and separate compute workers after September commits hit 7.38 billion, over five times a year earlier. The rebuild eases GitHub's capacity problem, but the CI runs and reviews each agent push sets off stay with customer teams.
Reality
- Evidence50
- Adoption15
- Hype gap+25
- Incentives55
- Confidence55
buildOne report1 publisher GitHub is rebuilding its Git storage around the write load agents create
GitHub is rebuilding its Git storage infrastructure as monthly pushes grew 4.9x in a year to 3.35 billion. The strain is on writes, since every push must be durable and consistent before the next agent or CI job can build on it.
Reality
- Evidence45
- Adoption50
- Hype gap+25
- Incentives60
- Confidence55
AIR says Claude Code, Codex, GitHub Copilot and Gemini CLI all check out a pinned plugin commit without verifying they landed on it, so a trusted plugin can be swapped for attacker code during a background auto-update. Anthropic and OpenAI have patched.
Perspective Coverage
4 publishers
- Builder
- Builder 41%
- Operator
- Operator 50%
- Investor
- Investor 9%
Reality
- Evidence70
- Adoption35
- Hype gap+40
- Incentives75
- Confidence66
buildOne report1 publisher The --config flag reopens a simple-git code-execution bug that was patched in 2022
CVE-2026-6951 reopens remote code execution in simple-git, a library downloaded 8.7 million times a week, by respelling the blocked -c flag as --config. The 2022 patch never checked the long form, so the same attack works wherever untrusted input reaches a git call.
Reality
- Evidence55
- Adoption45
- Hype gap+10
- Incentives20
- Confidence45
buildOne report1 publisher Codex CLI's /fork clones the chat into a worktree session with a separate checkout
OpenAI's Codex CLI refresh, builds 0.156.0 to 0.160.0, pitches /fork as a separate checkout, but its command reference says /fork clones only the chat. Two agents on one repo need a worktree session, started from the new agent command center.
Reality
- Evidence40
- Adoption
- Not scored
- Hype gap+25
- Incentives55
- Confidence45
buildOne report1 publisher Cloudflare's Artifacts beta wires Git repository events straight into Workers for AI agents
Cloudflare put Artifacts, a Git platform for AI agents, into open beta with three primitives: repo event subscriptions, Workers bindings and region controls. The detail comes from a third-party dev.to write-up, and its latency and residency claims still need confirming in Cloudflare's documentation.
Reality
- Evidence30
- Adoption
- Not scored
- Hype gap+40
- Incentives
- Not scored
- Confidence35
buildConfirmed2 publishers OpenAI has fixed a Critical Codex flaw in which a semicolon in a branch name leaked the agent's GitHub OAuth token on all four Codex surfaces. How far one leaked token could reach was set by its scope, which is chosen by whoever provisions the agent.
Reality
- Evidence55
- Adoption
- Not scored
- Hype gap+10
- Incentives45
- Confidence60
buildOne report1 publisher Git's SHA-256 Default Under Breaking-Changes Builds, Not Just After 3.0 Ships, Will Still Break CI Scripts
Git 3.0 will give new repositories 64-character SHA-256 object IDs in place of 40-character SHA-1, while existing repositories keep their format. Scott Chacon disputes the security payoff, and his own breakage list shows which scripts need changes.
Reality
- Evidence42
- Adoption8
- Hype gap+30
- Incentives
- Not scored
- Confidence38
buildOne report1 publisher A Claude Code permission rule now enforces the commit ban that 18 prompt files only requested
One developer running Claude Code on 80-plus microservices enforces a never-commit rule, once pasted into 18 prompt files, with a permission deny rule. An audit found the agent's settings file allowing the git commands those prompts banned in capitals.
Reality
- Evidence35
- Adoption15
- Hype gap+5
- Incentives
- Not scored
- Confidence40
buildOne report1 publisher One team's half-day audit found seven places its tooling assumed a 40-character Git hash
One team's half-day audit found seven places where its tooling hardcodes the 40-character SHA-1 hash length, ahead of an expected SHA-256 default in Git 3.0. SHA-256 hashes are 64 characters, so the fix is code that accepts both lengths and asks Git which format a repo uses.
Reality
- Evidence45
- Adoption
- Not scored
- Hype gap+5
- Incentives
- Not scored
- Confidence45
buildOne report1 publisher Git 2.56's add --resolved flag stages only the files a merge left in conflict
Git 2.56's git add --resolved stages only conflicted files and refuses to run while conflict markers remain, according to a dev.to walkthrough. Teams that still type git add -u after a merge can drop that habit once every machine they use runs 2.56.
Reality
- Evidence45
- Adoption
- Not scored
- Hype gap+10
- Incentives
- Not scored
- Confidence50
Git 2.56 ships its conflict-marker check as a flag that scripts and agents must opt into
Git 2.56 adds a staging flag that aborts on leftover conflict markers and cuts one Chromium diff from about eight minutes to 0.07 seconds. Teams get the speed by upgrading, but they get the safety only by editing the scripts their developers and coding agents run.
Reality
- Evidence58
- Adoption
- Not scored
- Hype gap+10
- Incentives30
- Confidence62
buildOne report1 publisher Claude Code's /rewind restores only files its own three editing tools touched
Anthropic's docs say Claude Code checkpoints track only its Write, Edit and NotebookEdit tools, so /rewind cannot restore what bash or a subagent changed. Recovering from an agent's rm or sed -i means git or a snapshot taken before the command ran.
Reality
- Evidence64
- Adoption
- Not scored
- Hype gap+8
- Incentives55
- Confidence62
buildOne report1 publisher Claude Code parent session's git rebase --skip erased 25 rows its subagent never committed
Running git rebase --skip in a parent Claude Code session erased 25 uncommitted rows its subagent wrote to the same working tree, per a dev.to postmortem. The rows were never staged, so git had no copy to restore.
Reality
- Evidence64
- Adoption
- Not scored
- Hype gap0
- Incentives
- Not scored
- Confidence60
buildConfirmed2 publishers Git 2.56.0 ships a merge-base stopping rule that GitHub measured at around 70 times faster in many cases on one large monorepo. Whether a build fleet sees gains like that depends on its repositories having old side branches merged into long histories.
Reality
- Evidence62
- Adoption
- Not scored
- Hype gap+15
- Incentives55
- Confidence66