Your Git History Is Not Immutable. It’s a Ticking Time Bomb.
We treat Git history like an immutable blockchain, but it’s actually a fragile chain of cryptographic hashes. If the collision resistance of that hash breaks, attackers can rewrite history and inject undetectable backdoors. The real danger isn’t just the math; it’s our blind assumption that Git is tamper-proof by default.