mgit v0.2.1-beta
mgit — a sandboxed, checkpointed working substrate for LLM coding agents
mgit gives a coding agent two things together: containment — its untrusted code (npm/pip installs, builds, tests) runs in a disposable per-task microVM, not on your machine — and a checkpointed working substrate — every step is a task-tagged micro-commit in an isolated .mgit store that never touches your real .git, so you review and land only the squashed result.
Beta. The microVM sandbox is the differentiator; it is live-validated on Linux (firecracker/KVM) and macOS (Apple Virtualization.framework, arm64). Windows runs core mgit without the sandbox. See Known limitations in the CHANGELOG.
Highlights
- Per-task microVM containment — installs/builds/tests run in a disposable, hardware-isolated VM; a poisoned dependency burns the VM, not your host. Default-deny per-task egress allowlist; verified land (dual-hash + task binding + host-anchored attestation) through an airlock.
mgit work— one command starts an agent on a task: a task-bound worktree with the agent's shell wired throughmgit runinto the sandbox.- Runs over your existing git repo — a self-contained
.mgitstore; your project's.gitis provably never mutated, and the base stays in sync with your local working state automatically (no manual sync). - Checkpointed, reviewable history — task-tagged micro-commits; backtrack / fork / cherry-pick to course-correct;
squash --to-git | git applylands a byte-for-byte patch. - Multi-agent worktree isolation, REST + MCP integration surfaces, dual-hash integrity, append-only audit.
- Pure Go, zero CGO — single static binary (Linux, macOS, Windows; amd64 + arm64).
Quality
- 530+ automated tests, race-detector clean under
-race, zero lint warnings.
Install
# Homebrew
brew install hyper-swe/tap/mgit
# Go
go install github.com/hyper-swe/mgit/cmd/mgit@latest
# Binary
# Download from the assets below for your platformPairs with mtix
mgit + mtix form a closed loop for enterprise AI-driven development: mtix tracks what to build, mgit tracks what was built. Task IDs flow between both systems. The unit of failure is a task, not a session.
Changelog
- 281ae37 docs(changelog): add [0.2.1-beta] — MGIT-42 branch-delete fix + README/skill
- 7c2a669 docs(readme): lead with benefits + testimonial; scannable hero
- f215f92 docs(readme): plain-language intro; sharpen the nudge to try it
- fd5d8b3 docs(skill): add "Common pitfalls (and the fix)" to the agent skill
- 04827fd fix(branch): delete clears both ref + index; create self-heals stale orphan