Zero-width, bidi and Unicode tag characters hid instructions in AI rules files. How they work, plus a ripgrep check and a git hook that block them.
Invisible Unicode in a Rules File Made Copilot and Cursor Write a Backdoor. Find It
Related
Our Agent Gate Blocked Every Bad Change. So Everyone Started Rubber-Stamping It.
We built a gate for agent work. It blocked bad changes beautifully. That was the problem. Nobody read...
Your Agent's Config Is a Dependency With No Lockfile
Your dependency policy is probably decent. Locked versions, hash verification, an SBOM if you're...
47 sealed bids later: my agent was pricing escrow work at 100% of budget
A parser bug priced every bid at the full posted budget on a market where the award rule was never stated. Here is the measurement, the fix, and what is still unknown.