Skip to content

mgit v0.2.1-beta

Choose a tag to compare

@github-actions github-actions released this 29 Jun 09:33
· 199 commits to main since this release

mgit — a sandboxed, checkpointed working substrate for LLM coding agents

mgit gives a coding agent two things together: containment — its untrusted code (npm/pip installs, builds, tests) runs in a disposable per-task microVM, not on your machine — and a checkpointed working substrate — every step is a task-tagged micro-commit in an isolated .mgit store that never touches your real .git, so you review and land only the squashed result.

Beta. The microVM sandbox is the differentiator; it is live-validated on Linux (firecracker/KVM) and macOS (Apple Virtualization.framework, arm64). Windows runs core mgit without the sandbox. See Known limitations in the CHANGELOG.

Highlights

  • Per-task microVM containment — installs/builds/tests run in a disposable, hardware-isolated VM; a poisoned dependency burns the VM, not your host. Default-deny per-task egress allowlist; verified land (dual-hash + task binding + host-anchored attestation) through an airlock.
  • mgit work — one command starts an agent on a task: a task-bound worktree with the agent's shell wired through mgit run into the sandbox.
  • Runs over your existing git repo — a self-contained .mgit store; your project's .git is provably never mutated, and the base stays in sync with your local working state automatically (no manual sync).
  • Checkpointed, reviewable history — task-tagged micro-commits; backtrack / fork / cherry-pick to course-correct; squash --to-git | git apply lands a byte-for-byte patch.
  • Multi-agent worktree isolation, REST + MCP integration surfaces, dual-hash integrity, append-only audit.
  • Pure Go, zero CGO — single static binary (Linux, macOS, Windows; amd64 + arm64).

Quality

  • 530+ automated tests, race-detector clean under -race, zero lint warnings.

Install

# Homebrew
brew install hyper-swe/tap/mgit

# Go
go install github.com/hyper-swe/mgit/cmd/mgit@latest

# Binary
# Download from the assets below for your platform

Pairs with mtix

mgit + mtix form a closed loop for enterprise AI-driven development: mtix tracks what to build, mgit tracks what was built. Task IDs flow between both systems. The unit of failure is a task, not a session.

Changelog

  • 281ae37 docs(changelog): add [0.2.1-beta] — MGIT-42 branch-delete fix + README/skill
  • 7c2a669 docs(readme): lead with benefits + testimonial; scannable hero
  • f215f92 docs(readme): plain-language intro; sharpen the nudge to try it
  • fd5d8b3 docs(skill): add "Common pitfalls (and the fix)" to the agent skill
  • 04827fd fix(branch): delete clears both ref + index; create self-heals stale orphan