Git worktrees are not an isolation boundary for coding agents
Most tools that run AI coding agents in parallel give each one a git worktree. A worktree shares refs, config, stash and hooks with your real repository. Paste-and-run repros showing an agent can execute code in your main repo and rewrite your commit identity, plus benchmarks showing a properly isolated clone costs the same.
Summary
AI coding agents using git worktrees may not be as isolated as previously thought, as they share critical components with the main repository. The article presents evidence that these setups can lead to unintended code execution and identity changes, raising questions about their safety and efficiency compared to fully isolated clones.
Comments (20 of ) ⌛