Use case sources
Source reports and analysis supporting this case are listed below. AITBM interpretation and any indicative scoring are derived from this public evidence.
Linked library records
Independent products or attack paths are assessed separately. A combined report receives no aggregate score.
- Goose repository review executes Git helper from packaged .git/config
- Claude Code startup executes packaged Git core.fsmonitor helper
- Claude Code ultrareview Git-setting helper execution
- Hermes Agent first-message Git helper execution
- Qwen Code startup Git helper executes before authorization
- Grok Build first-keystroke Git helper execution
Incident overview
Official AIDEFEND in Action September 2026 brief retained as a public-evidence reference; see the linked source for its bounded findings.
Why this analysis has no ERS
The parent combines six separately reproduced coding-agent product paths with different triggers and versions. No single aggregate deployment can receive an average ERS; only bounded child configurations are scored. Codex and Cursor are named but their chains are not independently described here, and ordinary clone/fetch/pull cannot deliver the physical .git/config precondition.
Status: Not scorable by design · Classification: Validated Research · source date 2026-09-13
AIDEFEND evidence routes
AIDEFEND defences → AITBM sub-metrics
Identifiers are quoted as they appear on the AIDEFEND in Action brief or in the AIDEFEND SecureFlow defense map (audited AIDEFEND dataVersion 2026.10.15); the sub-metric mapping is AITBM's own, from the specification's AIDEFEND tables reconciled at catalogue data version 2026.10.15. AIDEFEND renumbers identifiers between releases, so the data version travels with every mapping and neither side's IDs should be cited without one. A mapping identifies a possible evidence route; a recommendation does not prove that the control was implemented or effective and receives no scoring credit by itself.
| Technique | Defence | Priority | Evidences |
|---|---|---|---|
| AID-H-021.005 | AI Coding-Agent Workspace Activation Trust GateExact upstream page defense ID, verified against AIDEFEND dataVersion 2026.10.15. Presence supplies no score credit. | Candidate evidence route | Cn-2 Cn-5 Cn-9 |