Git Attribution & Worktrees

Fail-closed worktree isolation and RFC-compliant commit trailers.

M31A manages Git state as an authoritative security boundary, isolating agent mutations from the developer's primary working tree.

Worktree Isolation Authority

All agent mutations occur inside dedicated isolated Git worktrees (.m31a/tw2/ or temporary scratch branches). The developer's active checkout remains clean and untouched until explicit verification passes.

Fail-Closed Isolation Default

In production (v0.1.1), default_execution_isolation() is set to "required". If worktree creation fails or the directory is not a Git repository, execution fails closed immediately. Direct primary workspace mutations are permitted only if explicitly overridden with git.execution_isolation = "best_effort", which emits a prominent isolation downgrade warning.

RFC-Compliant Commit Attribution

Commits created by M31A embed RFC-compliant trailers providing verifiable provenance:

commit trailer

refactor(db): parameterize database query statements

M31A-Mission-ID: 019234b0-a5ef-7b23-96b0-96f7c75b001a
M31A-Agent-Role: implementer
M31A-Verified-By: verifier (evidence: sha256:7b9201f928e469c118...)