Skip to content

AFKBOT 1.9.16

Choose a tag to compare

@afkbot-io afkbot-io released this 03 Jun 11:04

Security

  • Task Flow public task/flow delete operations now require validated actor identity and manager authorization.
  • Public employee actors require live runtime session proof before mutating durable Task Flow state.
  • Public human/API callers can no longer bind arbitrary task session_id/session_profile_id values.

Fixed

  • Tool-layer Task Flow session binding now only defaults to live employee runtime sessions; operator actions no longer carry session proof.
  • Release metadata is aligned to 1.9.16.