Your AI Coding Agent Trusts Git More Than It Trusts You

Nobody clones a repo expecting the .git folder itself to be the payload. That's exactly why this bug...