I don’t see how this is palatable by serious organizations? So you build this huge memory graph of preferences? But none of it is explicit? It’s all just magic? The attack vectors from a security angle seem insane. Also the absence of any explicitness in how you define standards seems completely not viable in a commercial context? I mean it’s crazy cool as a hobby project, but also seems not to have a serious commercial viability?
There are definitely potential security issues with memory for coding agents, which apply to not only Cursor but also Windsurf. Looking forward to more research in this area.