GitHub introduces enclaves to block GitLost leaks

GitHub researchers introduced enclaves, an experimental security primitive designed to prevent AI agents from leaking private repository data in cross-repo workflows. An enclave operates as a single-use sandbox that isolates private data from the primary agent and enforces a strict information budget using finite response schemas and fixed timing channels. This mechanism mitigates risks like the GitLost attack by constraining what agents can communicate about private code. Open article →