Tip: sanitize the git config on every background context call, `git -c core.fsmonitor=false status`
Manifold Security·high signal
Manifold's vendor guidance for the GitSpawn class is one flag: pass `-c core.fsmonitor=false` on the status and diff calls your harness makes in the background, so a repository cannot supply the command Git will run. For users, the check before pointing an agent at a folder someone sent you is `git config --local --list` — any setting whose value names a program can run it. This is worth wiring into your own wrapper scripts today rather than waiting on the four unpatched agents.