{
  "story_id": "0b6643546b0f211596c3539ef63946a2",
  "desk": "drm3",
  "revision": 1,
  "published_at": "2026-09-02T04:00:00.000Z",
  "content_hash": "a63eb614279e49ad572d2940cc3157df29492ec255efcbb317ad986e72b3a712",
  "hash_basis": "sha256 over `headline\\ndek\\nprose`, plus `\\n` + the canonical citations JSON when any source is placed, plus `\\n#blog` for blogs",
  "basis": {
    "headline": "Gemini CLI v0.59.0 Adds SSRF Fixes and Workspace Trust Enforcement",
    "dek": "Gemini CLI v0.59.0 releases security patches for SSRF and workspace trust.",
    "prose": "A fix was implemented to prevent Server-Side Request Forgery (SSRF) in Model Context Protocol (MCP) OAuth metadata discovery and authentication. [^1]\n\nThe Gemini CLI project released version 0.59.0 on August 25, 2026, as part of the nightly build cycle. [^2]\n\nHolding the executor fixed, Dr. Claw scores higher on research completeness while persisting an auditable, recoverable process trail. [^3]\n\nThe authors present Dr. Claw, an open-source workspace that wraps existing coding-agent executors in a controllable and auditable human-in-the-loop workflow. [^4]\n\nThe update enforces fail-closed workspace trust and filters MCP servers when the application is in restricted mode. [^5]\n\nDr. Claw is designed to address the fragmentation of end-to-end AI research across chat tools, IDEs, terminals, and writing environments. [^6]\n\nThe system utilizes persistent state objects, a reusable skill library, and multi-executor coordination to link human decisions to AI execution. [^7]\n\nDeveloper Luis Felipe Alt contributed the fix for enforcing fail-closed workspace trust and filtering MCP servers. [^8]",
    "cited": "[{\"statement\":\"A fix was implemented to prevent Server-Side Request Forgery (SSRF) in Model Context Protocol (MCP) OAuth metadata discovery and authentication.\",\"source\":\"GitHub\",\"instrument\":\"News\",\"claim_key\":null,\"published_at\":\"2026-09-01T20:19:07.000Z\",\"publisher_count\":1,\"sources\":[\"GitHub\"]},{\"statement\":\"The Gemini CLI project released version 0.59.0 on August 25, 2026, as part of the nightly build cycle.\",\"source\":\"GitHub\",\"instrument\":\"News\",\"claim_key\":null,\"published_at\":\"2026-09-01T20:19:07.000Z\",\"publisher_count\":1,\"sources\":[\"GitHub\"]},{\"statement\":\"Holding the executor fixed, Dr. Claw scores higher on research completeness while persisting an auditable, recoverable process trail.\",\"source\":\"arXiv.org\",\"instrument\":\"News\",\"claim_key\":null,\"published_at\":\"2026-09-02T04:00:00.000Z\",\"publisher_count\":1,\"sources\":[\"arXiv.org\"]},{\"statement\":\"The authors present Dr. Claw, an open-source workspace that wraps existing coding-agent executors in a controllable and auditable human-in-the-loop workflow.\",\"source\":\"arXiv.org\",\"instrument\":\"News\",\"claim_key\":null,\"published_at\":\"2026-09-02T04:00:00.000Z\",\"publisher_count\":1,\"sources\":[\"arXiv.org\"]},{\"statement\":\"The update enforces fail-closed workspace trust and filters MCP servers when the application is in restricted mode.\",\"source\":\"GitHub\",\"instrument\":\"News\",\"claim_key\":null,\"published_at\":\"2026-09-01T20:19:07.000Z\",\"publisher_count\":1,\"sources\":[\"GitHub\"]},{\"statement\":\"Dr. Claw is designed to address the fragmentation of end-to-end AI research across chat tools, IDEs, terminals, and writing environments.\",\"source\":\"arXiv.org\",\"instrument\":\"News\",\"claim_key\":null,\"published_at\":\"2026-09-02T04:00:00.000Z\",\"publisher_count\":1,\"sources\":[\"arXiv.org\"]},{\"statement\":\"The system utilizes persistent state objects, a reusable skill library, and multi-executor coordination to link human decisions to AI execution.\",\"source\":\"arXiv.org\",\"instrument\":\"News\",\"claim_key\":null,\"published_at\":\"2026-09-02T04:00:00.000Z\",\"publisher_count\":1,\"sources\":[\"arXiv.org\"]},{\"statement\":\"Developer Luis Felipe Alt contributed the fix for enforcing fail-closed workspace trust and filtering MCP servers.\",\"source\":\"GitHub\",\"instrument\":\"News\",\"claim_key\":null,\"published_at\":\"2026-09-01T20:19:07.000Z\",\"publisher_count\":1,\"sources\":[\"GitHub\"]}]",
    "kind": "news"
  },
  "receipt_verify": "Ed25519 over the dot-joined string `slice_hash.cursor_from.cursor_to.view.view_version.row_count`; public_key and sig are base64url of the raw 32-byte key / 64-byte signature",
  "receipt": null,
  "receipt_note": "this revision predates receipt-keeping (before v0.37.0); the filed row lives in the record",
  "generation_chain": {
    "wire": {
      "stream": "fountain_news",
      "story_id": "0b3455b80291d65a91ad07821bd1b89d",
      "thread_id": "d22991a33975f8add3ae0b09c4947ba3",
      "thread_label": "Gemini CLI",
      "novelty": "UPDATE",
      "content_hash": "c07632036c8017734bf24de95cd877e0c6da271ea7a41b4977feda4e278640e9",
      "last_published_at": "2026-09-02T04:00:00.000Z",
      "read_receipt": {
        "slice_hash": "3905664cf10c2126ea131af76eb59a4e670141af2a4606d101f9336a8aaf6e3e",
        "cursor_from": "eyJ0cyI6IjIwMjYtMDktMDJUMDM6NDM6MDAuMDAwMDAwWiIsImlkIjoiZjIzZjc5YTk3YjM4MGMyNDgzZTRlNzYxMjNlZjg2M2QiLCJ2IjoiMSJ9",
        "cursor_to": "eyJ0cyI6IjIwMjYtMDktMDJUMDQ6MDQ6MjYuMDAwMDAwWiIsImlkIjoiN2M3MjY3YjA5MzczMjU3ZjI0ZDZiY2NmZWY3ZDVjNGUiLCJ2IjoiMSJ9",
        "view": "v_fountain_news",
        "view_version": "1",
        "row_count": 100,
        "window_days": 3,
        "bytes_scanned": 12017721,
        "credits": 8,
        "price_per_100_rows": 8,
        "sig": "juwMycx6aGSQfawfzLUaISZZUKKkbvDiOPDpZxKn6fmy0KIBoISR1qDjkJuogjQ0TUgCk4tYeoc9JF0bPKfOCw",
        "public_key": "bMUigy8O0jOnBxQ4Sc-5lwhIZ8LQVAhxMbR7qESVuUE",
        "signer_path": "lakehouse/data-extract/v1",
        "alg": "Ed25519",
        "signed": true
      }
    },
    "written_at": "2026-09-02T22:35:56.826Z"
  },
  "cited_facts": [
    {
      "statement": "A fix was implemented to prevent Server-Side Request Forgery (SSRF) in Model Context Protocol (MCP) OAuth metadata discovery and authentication.",
      "source": "GitHub",
      "instrument": "News",
      "claim_key": null,
      "published_at": "2026-09-01T20:19:07.000Z",
      "publisher_count": 1,
      "sources": [
        "GitHub"
      ]
    },
    {
      "statement": "The Gemini CLI project released version 0.59.0 on August 25, 2026, as part of the nightly build cycle.",
      "source": "GitHub",
      "instrument": "News",
      "claim_key": null,
      "published_at": "2026-09-01T20:19:07.000Z",
      "publisher_count": 1,
      "sources": [
        "GitHub"
      ]
    },
    {
      "statement": "Holding the executor fixed, Dr. Claw scores higher on research completeness while persisting an auditable, recoverable process trail.",
      "source": "arXiv.org",
      "instrument": "News",
      "claim_key": null,
      "published_at": "2026-09-02T04:00:00.000Z",
      "publisher_count": 1,
      "sources": [
        "arXiv.org"
      ]
    },
    {
      "statement": "The authors present Dr. Claw, an open-source workspace that wraps existing coding-agent executors in a controllable and auditable human-in-the-loop workflow.",
      "source": "arXiv.org",
      "instrument": "News",
      "claim_key": null,
      "published_at": "2026-09-02T04:00:00.000Z",
      "publisher_count": 1,
      "sources": [
        "arXiv.org"
      ]
    },
    {
      "statement": "The update enforces fail-closed workspace trust and filters MCP servers when the application is in restricted mode.",
      "source": "GitHub",
      "instrument": "News",
      "claim_key": null,
      "published_at": "2026-09-01T20:19:07.000Z",
      "publisher_count": 1,
      "sources": [
        "GitHub"
      ]
    },
    {
      "statement": "Dr. Claw is designed to address the fragmentation of end-to-end AI research across chat tools, IDEs, terminals, and writing environments.",
      "source": "arXiv.org",
      "instrument": "News",
      "claim_key": null,
      "published_at": "2026-09-02T04:00:00.000Z",
      "publisher_count": 1,
      "sources": [
        "arXiv.org"
      ]
    },
    {
      "statement": "The system utilizes persistent state objects, a reusable skill library, and multi-executor coordination to link human decisions to AI execution.",
      "source": "arXiv.org",
      "instrument": "News",
      "claim_key": null,
      "published_at": "2026-09-02T04:00:00.000Z",
      "publisher_count": 1,
      "sources": [
        "arXiv.org"
      ]
    },
    {
      "statement": "Developer Luis Felipe Alt contributed the fix for enforcing fail-closed workspace trust and filtering MCP servers.",
      "source": "GitHub",
      "instrument": "News",
      "claim_key": null,
      "published_at": "2026-09-01T20:19:07.000Z",
      "publisher_count": 1,
      "sources": [
        "GitHub"
      ]
    }
  ],
  "note": "A signature proves who filed this and that it has not changed since. It never makes a claim true."
}