Antigravity 代码揭示了由 Gemini 提供支持的 Vetted 模式

版本 2.12.2 包含一个门控权限预设,该预设将第二个 AI 系统指定为批准或拒绝代理提出的操作。

By · Published

RUNTIMEWIRE INVESTIGATION — Scoop

Original reporting by RuntimeWire, based on reverse engineering.

为何重要

Vetted 将允许开发者用第二个模型的判断来替代一些手动批准提示。其价值取决于部署范围、失败时的默认处理方式以及分发的代码并未确立的可测安全性能。

Reporting record

Finding

Antigravity 2.12.2 contains a gated permission preset backed by a security evaluator called Policy Guardian. Recovered code and prompts describe checks on tool calls, downloads, dependencies and attempts to repeat denied actions.

How we verified

Methods: reverse engineering.

The Vetted beta option exists in the 2.12.2 UI, literal preset definition and settings dropdown wiring

Reverse engineered the package.

Tested versions:

  • Antigravity 2.12.2

Reproduction

RuntimeWire partially reproduced the finding.

File hashes

  • language_server.exe: 424ed4ef6fc9cb470ce785d8f4b392de3fa94fd16d030e6ff83e043440659f94
  • app.asar: a75535fec1f039be8e78c6a66f3e41f15969101fcf44a0690b7dce4d998b875b

Company response

The company did not respond to requests for comment.

A reconstructed dark digital interface shows 'Vetted (beta)' selected in permission settings, with a glowing network representing an AI security agent.

Google Antigravity 根据 RuntimeWire 对随 Antigravity 2.12.2 分发文件的静态检查,构建了一种权限模式,将 Gemini 指派为对 AI 编码代理想要运行的命令进行监督的角色。

RuntimeWire 基于从版本 2.12.2 恢复的代码和样式,重建了 Antigravity 的 “Vetted (beta)” 权限设置。其描述将命令审批决策分配给由 Gemini 提供动力的安全代理。尚未确认用户可用性。

该设置标注为 "Vetted (beta)"。其界面描述为:"A Gemini-powered security agent decides if commands should be auto-approved." 该选项由一个可用性标志控制,因此其对用户的可用性取决于服务器提供的实验配置。RuntimeWire 并未通过活跃账户激活该设置。…

When you purchase through links in our articles, we may earn a small commission. This doesn’t affect our editorial independence.

Reader comments

Conversation for this story loads after sign-in.