Ait

v1.8.0 Security

This release includes 1 security fix for security teams reviewing exposed deployments.

Published 1mo AI Agents & Assistants

✓ No known CVEs patched

This release patches 1 known CVE

Topics

agent-harness agent-isolation agentic ai-agents ai-coding ai-tools

+14 more

aider claude-code code-provenance codex coding-assistant cursor developer-tools gemini-cli git git-worktree llm-agents python vcs worktree

Affected surfaces

breaking_upgrade

Summary

AI summary

Added ait status cleanup_hint to surface reclaimable worktrees and hardened the cleanup engine against various failure modes.

Type	Severity	Summary	CVE
Feature	Medium	`ait status` now surfaces reclaimable worktrees via a new `cleanup_hint` block. `ait status` now surfaces reclaimable worktrees via a new `cleanup_hint` block. Source: llm_adapter@2026-06-08 Confidence: high	—
Bugfix	Medium	Cleanup engine hardens containment, skips symlinks, handles malformed refs without crashing. Cleanup engine hardens containment, skips symlinks, handles malformed refs without crashing. Source: llm_adapter@2026-06-08 Confidence: high	—

Full changelog

Added

ait status now surfaces reclaimable worktrees via a new cleanup_hint block (JSON + text): counts reclaimable / retained-succeeded / anomalous worktrees so you know when .ait/workspaces/ has stale worktrees worth reclaiming. Deletion stays user-driven via ait cleanup --apply (no background auto-delete; rejected after design review for TOCTOU races with resume/recover/continue reentry). Read-only ait status never crashes on a malformed workspace_ref.

Fixed

Cleanup engine ref/symlink/containment hardening: containment-before-sizing (no DoS walk outside .ait/workspaces), skip symlinked worktree/artifact candidates (never follow/size/delete the target), safe-resolve malformed/relative refs (anomalous-ref instead of crashing), and delete-time containment recheck (TOCTOU). New skip reasons: symlink-skip, outside-worktree, anomalous-ref, delete-time-unsafe.

See CHANGELOG.md for full details.

Cleanup engine hardened: containment checks before sizing, skips symlinked candidates, handles malformed refs gracefully, and rechecks containment at delete time to prevent TOCTOU issues

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Track Ait

Get notified when new releases ship.

About Ait

v0.55.52 Keep the built-in claude-code reviewer pinned to the local claude -p CLI even when repository policy defines a conflicting command override.