The Chat Approved It. Git Still Has No Receipt

说明与用途

AI 自动化导致 Git 提交缺乏人工审核，出现未记录的更改、秘密泄露和策略违规。通过明确的提交说明、提示清理与哈希、锁文件 ACK 以及代码层面的策略检查，可恢复审计和安全性。

问题

Cheap AI inference leads to missing human review gates, causing undocumented changes, secret leaks, lockfile tampering, and policy bypasses in Git workflows.

结果

Adopting explicit commit documentation, prompt redaction, lockfile ACKs, and code‑based policy enforcement restores auditability, prevents secret leakage, and ensures human review in AI‑augmented Git workflows.

工作流

• 1. Draft commit message with trade‑off and decision text. 2. Append chat transcript as appendix only. 3. Redact and hash prompt files before sending to LLM. 4. Run lockfile ACK script to ensure any lockfile changes are reviewed. 5. Enforce policy checks in code (e.g., denylist hostnames) before executing tools.

证据

I put the tradeoff in the commit body. I link the chat only as appendix, never as proof.

来源

I redact the raw prompt first, without exceptions. I hash the cleaned prompt file second.

来源

I require an explicit ACK file in the pull request. No ACK means the CI job fails closed.

来源