Files
msd-core/.changeset/3542-executor-git-stash-prohibition.md
Tom Boucher 0d9a800e56 chore(3542): backfill PR number in changeset
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
2026-05-15 08:31:19 -04:00

1007 B

type, pr
type pr
Fixed 3546

Executor agents are now forbidden from running any git stash subcommand inside worktree isolation — git stores stashes at refs/stash in the parent .git/ directory, so the stash list is shared across the main checkout and every linked worktree. A git stash pop inside an executor's worktree silently applied WIP pushed from a prior sibling-worktree session, producing UU/UD merge-conflict states and phantom untracked files that violated the isolation="worktree" invariant. The <destructive_git_prohibition> block in agents/gsd-executor.md now lists the full git stash family alongside --no-verify, --hard, and git update-ref, with sanctioned alternatives (commit to a throwaway branch you own, or read-only git show <ref>:<path> / git diff <ref> -- <path>). The orchestrator-side post-wave-hook helper in execute-phase.md continues to use stash deliberately and is now annotated to make the single-checkout precondition explicit. Closes #3542.