Jeremy Rose bc3545b805 Validate linked worktrees before inheriting project trust (#39616) ...

## Why

A checkout could point its `.git` file at a trusted repository's worktree
directory without proving that the repository had registered that checkout.
This could cause project configuration from an unrelated checkout to be treated
as trusted.

## What changed

- Verify the linked worktree's `gitdir` backlink, `commondir`, registered
  checkout, and main checkout ownership before resolving the main repository's
  trust key.
- Reject missing, oversized, symlinked, mismatched, or swapped Git metadata.
- Preserve valid linked worktrees that use path aliases, separate Git
  directories, or non-UTF-8 POSIX paths.

## Testing

Add resolver and config-loading coverage for forged worktrees, metadata races,
case-sensitive paths, moved worktrees, and host MCP startup from project config.

GitOrigin-RevId: 6052a7d10ad2d613436f20175c356abdef8c758e

2026-08-20 06:29:32 +00:00

..

src

Validate linked worktrees before inheriting project trust (#39616)

2026-08-20 06:29:32 +00:00

BUILD.bazel

Add typed file URIs (#26840)

2026-06-08 16:33:41 -07:00

Cargo.toml

[codex] make PathUri::from_abs_path infallible (#27976)

2026-06-12 16:58:42 -07:00