"Aider scores 32/55 — +7 over Pi. Where does the +7 come from?"	Almost entirely from the GIT-FIRST philosophy. +2 context (repo-map), +2 memory (git), +3 state (git), +2 verification (diff review), +1 permission (git-gated). Git is the multiplier.	harness-engineering::dd02::analysis
"What does 'git-as-substrate' mean for Aider?"	One infrastructure choice (git) gives 5 rubric modules: state (git reset), memory (commits across sessions), verification (human reviews diff), permission (git-gated), observability (git log). No other harness gets this much from one decision.	harness-engineering::dd02::recall
"State Aider's permission model and how it differs from Pi's."	Aider = git-gated (post-hoc review + rollback via git reset). Pi = trust-the-model (no review). Aider trades real-time approval for post-hoc review with native version control. Better for coding; doesn't catch malicious-only-wrong.	harness-engineering::dd02::analysis
"What is Aider's diff-based editing, and why is it better than Pi's write_file?"	Search/replace blocks target specific changes, not whole-file rewrites. More reliable (less token cost, fewer hallucinated-full-file errors). 3 years of iteration have refined this to the field's best.	harness-engineering::dd02::analysis
"What is the repo-map, and which module does it serve?"	An AST-based file index in context. The model sees the repo STRUCTURE without reading every file. Serves Module 3 (Context Management) — Aider's advantage over Pi (which has no context management).	harness-engineering::dd02::application
"Why is Aider called 'the benchmark creator'?"	It created the Aider Polyglot Benchmark — the de facto standard for evaluating coding agents across languages. Most published coding-agent benchmark numbers trace to Aider's methodology.	harness-engineering::dd02::recall
"Aider's git-gating catches wrong changes. Does it catch malicious ones?"	NO — git-gating provides change review and rollback, NOT injection defense. A prompt-injected model can commit a benign-looking change containing an exfiltration payload. Human diff-review may miss it.	harness-engineering::dd02::analysis
"Name 3 things Aider does better than any other harness."	(1) Git-as-substrate (5 modules from 1 choice). (2) Benchmark creation (defined how the field measures). (3) Diff-based editing reliability (search/replace blocks; 3 years refined).	harness-engineering::dd02::recall
"Name 3 things to fix if you forked Aider."	(1) Add Docker sandbox (blast radius = host, same as Pi). (2) Add untrusted-tagging on file reads (README injection). (3) Add a token budget (long sessions can run away).	harness-engineering::dd02::application
"Aider blast radius vs Pi blast radius — same or different?"	SAME — both have bash with full host access; no sandbox; no scoping. A compromised process can read ~/.ssh and exfiltrate in both. Aider's git-gating catches wrong edits, not malicious exfiltration.	harness-engineering::dd02::analysis