At least we, as users, have control of what information Claude has access to in this case:
reply - Option 1: Don't give Claude the `.git` directory
- Option 2: Build a `.git` anonymizer that overwrite git history with bogus emails
That's barely control. There's going to be 100 ways your email leaks.
replyYeah but leaking because Anthropic leaked your email vs. you underengineered your sandbox are two very different failure modes imo.
replyLLMs are supposed to be a panacea for building digital systems. A sandbox inside which an LLM can operate freely surely should be one of the first systems we should all strive to engineer.
If we can't properly sandbox an LLM, I would say that's a pretty good sign that LLMs are not a panacea for building digital systems.
Even if they’re not a panacea we have to accept the reality that all enterprise IT environments have at least some level of LLM exposure and figure out a way to manage the situation.
replyWhy does it need to perform a commit to read the log?
replyThe repo's other commits could be from someone else - whereas a commit it wrote itself is guaranteed to be from the correct/local account.
reply