CLAIM-2026-09-06-05

Cloning is not the vector: git does not copy a remote's config, so clone, fetch and pull are inert. The repository must arrive as files with its .git directory present — a zip, a shared drive, a sync folder, a USB stick.

Why it matters

It inverts the intuitive mitigation. 'Do not clone untrusted repos' is not the rule; 'do not open a folder someone sent you' is.

Sources

• manifoldsec2026gitspawn
• gitproject2026gitconfig