Skip to content

Ait

v1.7.2 Security

This release includes 1 security fix for security teams reviewing exposed deployments.

✓ No known CVEs patched
Read the diff → Tool health → What is this tool? →
This release patches 1 known CVE

Topics

agent-harness agent-isolation agentic ai-agents ai-coding ai-tools
+14 more
aider claude-code code-provenance codex coding-assistant cursor developer-tools gemini-cli git git-worktree llm-agents python vcs worktree

Affected surfaces

auth

ReleasePort's take

Light signal
editorial:auto 3d

Release v1.7.2 of Ait disables automatic continuation of recoverable attempts across repositories.

Why it matters: The update blocks cross‑repository auto‑continue for recoverable attempts, reducing unintended propagation risk per the security fix (severity 90).

Summary

AI summary

Prevent automatic continuation of recoverable attempts across repositories.

Changes in this release

Security Critical

Prevents cross‑repository auto‑continue of recoverable attempts via global activity fallback.

Prevents cross‑repository auto‑continue of recoverable attempts via global activity fallback.

Source: llm_adapter@2026-06-01

Confidence: high

Full changelog

Safety fix: prevent wrapper auto-continue (ait agent-continue) from resuming recoverable attempts from another repository via global recent activity fallback.

Manual ait continue keeps the cross-repo recent fallback; automatic adapter wrapper resume is now strictly scoped to the current resolved repo root.

Security Fixes

  • Safety fix: wrapper auto-continue (ait agent-continue) no longer resumes recoverable attempts from another repository via global recent activity fallback; automatic resume now strictly scoped to the current resolved repo root.

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Track Ait

Get notified when new releases ship.

Sign up free

Related context

Earlier breaking changes

  • v0.55.52 Keep the built-in claude-code reviewer pinned to the local claude -p CLI even when repository policy defines a conflicting command override.

Beta — feedback welcome: [email protected]