v0.3.2

0.3.2 (2026-10-16)

Bug Fixes

• alerts: raise ptrace.attempt for strace, ltrace and gdb attach (b93733f)
• docker: start on Docker 28 when the proxy's pinned IP is refused (fc51f25)
• events: keep guest alerts flowing through lag and redials (a0ce9a9)
• exec: close the WebSocket after Exit (00f5b45)
• exec: enforce timeout_ms on output pipes, not only the root (d8abdfb)
• exec: kill processes left stopped after their tracer died (0032548)
• native: refuse UDP sockets in Linux native sandboxes (7a8944c)
• proto: align rule severities with the protocol (fd10fc5)
• remote: restart a stopped microVM while the old one tears down (7d0eae6)
• remote: wait for firecracker's sockets to accept, not to exist (9e90b71)

v0.3.1

0.3.1 (2026-10-14)

Bug Fixes

• guest: track an exec pid before the PID 1 reaper can reap it (bafd08e)
• guest: watch the workspace owner's home, not a root daemon's (1d3c1a8)
• log why a create failed and when base.warm overrides pool_size (32e8daa)
• native: make the native tier work on Linux (f3b3b99)
• pool: no leaks on a failed resize or at shutdown; keep workspaces (ddfcb8d)
• scan: tear down the scan sandbox when the daemon stops mid-scan (f0a91d6)
• vm: clean up failed starts and serialise rootless keep-id creates (1ec6ccb)

Performance Improvements

• set TCP_NODELAY on every hop and stream reads in 64 KiB chunks (5976dfc)

v0.3.0

0.3.0 (2026-10-13)

Features

• sdk: publish the SDKs to npm, PyPI, crates.io and Maven Central (3b9892d)

v0.2.0

0.2.0 (2026-10-09)

Features

• sdk: Go SDK with full Python parity (bf12971)
• sdk: Java SDK with full Python parity (884e1aa)
• sdk: Rust SDK with full Python parity (9b9075b)

Bug Fixes

• alerts: drop the .netrc canary, match setuid names as commands only (49ef157)
• sdk: destroy() is idempotent in the Python and TypeScript SDKs (caaec0f)
• sessions: a command's trailing stderr stays with that command (955fa7d)
• vm: sandboxes can signal their own processes on podman with crun (40b926e)

v0.1.0

0.1.0 (2026-10-09)

Features

• Qafas Sandbox, a secure execution sandbox for LLM coding agents (8e0f83b)