xzwache's released Claude Time Machine plugin claims per-tool-call project snapshots with /tm undo restoring Bash-side damage (/rewind covers only file-tool edits) and becomes an adopted safety layer against agent-caused local damage in Claude Code workflows; external adoption confirms it, quiet fade closes it.
state: seedheat: lowuncertainty: mediumknownscott: mediumagent-harnesses state-rollback claude-codexzwache
What is this?
Claude Time Machine is a community plugin for Anthropic's Claude Code CLI, published on GitHub by user xzwache, that snapshots the project work tree around the agent's steps so a whole turn (or a single step) can be undone — including damage done through Bash (rm, mv, formatters, codegen), which the repo presents as a gap in Claude Code's built-in checkpointing (/rewind), described there as covering only file-tool edits. Anthropic does document a built-in checkpointing/rewind feature, but the supplied docs snippet doesn't confirm its exact scope, and a YouTube blurb loosely claims the built-in feature 'rewinds any change', so the precise limitation is asserted by the plugin, not independently established here. Attention to the pattern looks real but crowded: a trendshift listing describes a 'Ctrl+Z for Claude Code' repo matching this description (apparently this one, though the snippet doesn't name the owner), while at least two other developers have shipped same-named or overlapping tools (nuhmanpk's Claude Time Machine VS Code extension; dani_avila7's Time Machine, which records prompts, tool calls, and Bash into a forkable timeline). The snippets show no adoption numbers, and note a characterization mismatch: the repo says snapshots are of the work tree, not per tool call as the case hypothesis states.
Why it matters to Scott
Scott's own wikis already carry this position — ip:source.ai-doesnt-fear-death makes externalised review-and-rollback the safety case for agents, and reversibility-membrane/blast-radius name exactly the file-edit-vs-Bash undo asymmetry this plugin patches — while the radar already tracks the /rewind surface (claude-code-revert-file-bug) plus several sibling rollback tools, so it adds nothing new on either side. It stays above noise because it targets Claude Code, which he drives daily across projects, and supplies the mechanical undo for shell effects his own ask agent conspicuously lacks — adoptable or borrowable (work-tree-snapshot-before-turn) if the plugin's unverified claims and adoption pan out.
ip:source.ai-doesnt-fear-deathip:concept.reversibility-membraneip:concept.blast-radiusdev:project.askdev:project.superleverdev:technology.claude-coderadar:claude-code-revert-file-bugradar:agent-acid-rollback-guardrailsradar:sagashield-agent-transactionsradar:overlord-transactional-agent-executionradar:bailout-disposable-agent-recoveryradar:claude-code-48k-file-deletionradar:concept.claude-coderadar:concept.agent-harnesses
queries asked of Scott's wikis
- agent-caused damage rollback undo safety
- claude code harness hooks plugin tooling
- bash destructive commands blast radius agent
- worktree snapshot checkpoint git safety net
- file-edit tools vs shell commands undo asymmetry
- coding agent autonomy trust guardrails position
Measured heat
now 0 pts/hpeak 2 pts/hcomments 0/hpeers p0momentum: steady1 platformsage 92h
points/hour across evidence · reading as of 2026-10-12 02:59:37.977291+11:00 · deterministic, not a model opinion
How the heat travelled
pace: p25 vs 1243 stories at the 72h mark (now 92h old) — ahead of aafp-commons-signed-agent-notebook (2.0x), behind agentgate-signed-agent-receipts (0.7x)
Evidence (1) — ⭐ canonical anchor
Interpretation history
2026-10-07T20:48:36Z
grounded: known/medium — Scott's own wikis already carry this position — ip:source.ai-doesnt-fear-death makes externalised review-and-rollback the safety case for agents, and reversibil
2026-10-07T20:37:59Z
case created — Released artifact closing a documented harness gap (non-undoable Bash mutations) fits the harness-safety-tooling pattern and is distinct from the turn-revert bug case.
Decision trace
- 10-08 12:22attention_routeThe editor compared this story and chose to keep watching.
- 10-08 08:13attention_routeDaily-driver relevance but a thin, unverified single-source artifact; correctly sized as further reading in the briefing rather than a standalone heads-up.
- 10-08 08:06attention_candidatecreate
- 10-08 07:48groundScott's own wikis already carry this position — ip:source.ai-doesnt-fear-death makes externalised review-and-rollback the safety case for agents, and reversibility-membrane/blast-radius name exac
- 10-08 07:38createReleased artifact closing a documented harness gap (non-undoable Bash mutations) fits the harness-safety-tooling pattern and is distinct from the turn-revert bug case.