Hi @NIEREIN, following up on this!
We’ve updated Addressing the recent Mindgard report to clarify that this has been fixed.
To answer your earlier question directly: yes, the resolution logic itself changed. Cursor IDE operations now resolve Git by a validated absolute path, Windows no longer performs executable discovery in the opened folder, and a planted git.exe in a repository root no longer runs when you open the folder. That’s a change to the resolution behavior itself, in addition to Workspace Trust, which remains the broader control for working with untrusted repositories.
On your broader point about how we communicate issues like these, that’s fair feedback, and we’re going to work on our strategy for communicating them going forward!