Summary
Claude Code 2.1.222 fixed a gap where worktree-isolated sessions and their subagents could run destructive git commands against the main checkout. Isolation now applies to file edits and Bash across every session type, tightening the boundary for background and forked agents.
What changed
On August 5, 2026 Claude Code 2.1.222 fixed worktree-isolated sessions and their subagents being able to run destructive git commands against the main checkout; isolation now applies to file edits and Bash in every session type. The release also fixed pull request linking for branches pushed via the GitHub REST API.
Why it matters
Worktree isolation is the safety boundary that lets teams run parallel and background coding agents without risking the main checkout. Closing a hole that allowed destructive git and Bash to reach the primary working tree is a meaningful trust-boundary fix as more work shifts to autonomous, long-running agent sessions.
Evidence excerpt
Fixed worktree-isolated sessions and their subagents being able to run destructive git commands against the main checkout; isolation now applies to file edits and Bash in every session type.