Re:Git is forever. I'm building Oak anyways
by fireant on Tuesday June 23, 2026 @11:23AM
(#48646521)
Personally I really dislike when the agents generate super long composed shell commands because they are really hard to audit. ffmpeg I'd whitelist, but if it makes a mistake in some super long chained git command it can have pretty scary consequences.
Re:Git is forever. I'm building Oak anyways
by yencabulator on Tuesday June 23, 2026 @05:15PM
(#48651568)
Totally breaks the permission model in Claude Code.
Re:Git is forever. I'm building Oak anyways
by cruffle_duffle on Tuesday June 23, 2026 @11:51PM
(#48654869)
To be fair Claude is plenty capable of climbing out of its sandbox. If it has shell access, it will find a way. And honestly, it’s whitelist/blacklist permission model is broken and inappropriate for it to begin with.
The crazy thing to me is that this kind of “composition of small tools to create something bigger” is the biggest vindication of the Unix philosophy I can think of.
I have to wonder how much of that behavior was trained into the model and how much it is the secret herbs and spices they toss into the harnesses own system prompts.