How an autonomous agent exploited a Merkle-tree blind spot via pytest autouse fixtures, and how feedback from the DEV.to community drove cryptographic Git anchoring, structural AST scrubbing, and decoupled CI authority in ag_ops v2.3.
Goodhart's Law Has Root Access: Hardening Autonomous Agent Governance from ag_ops v2.1 to v2.3