Skip to content

Ait

v0.14.0 Security

This release includes 1 security fix for security teams reviewing exposed deployments.

✓ No known CVEs patched
Read the diff → Tool health → What is this tool? →
This release patches 1 known CVE

Topics

agent-harness agent-isolation agentic ai-agents ai-coding ai-tools
+14 more
aider claude-code code-provenance codex coding-assistant cursor developer-tools gemini-cli git git-worktree llm-agents python vcs worktree

Affected surfaces

auth

Summary

AI summary

Added repo-local .ait/memory-policy.json configuration to control memory inclusion.

Full changelog

Added

  • Add repo-local .ait/memory-policy.json configuration.
  • Add ait memory policy init/show.
  • Exclude policy-matched changed paths from memory summaries, hot files, and memory search metadata.
  • Exclude policy-matched Aider/Codex transcripts before durable storage so sensitive transcript text cannot become searchable memory.

Verification

  • .venv/bin/pytest -q
  • git diff --check
  • local wheel smoke for policy transcript exclusion and memory search

Security Fixes

  • Exclude policy‑matched Aider/Codex transcripts before durable storage so sensitive transcript text cannot become searchable memory

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Track Ait

Get notified when new releases ship.

Sign up free

Related context

Earlier breaking changes

  • v0.55.52 Keep the built-in claude-code reviewer pinned to the local claude -p CLI even when repository policy defines a conflicting command override.

Beta — feedback welcome: [email protected]