Repository navigation
v2.8.0
Highlights
- Adds the Linux Bubblewrap-backed
restrictive-v1execution boundary with a read-only workspace, private/tmp, fixed environment, and no IP network. - Adds effective launcher and isolation receipts, with fail-closed errors when restrictive execution cannot be satisfied.
- Fixes retained-output replacement, deletion, cleanup, and foreground-to-background race behavior.
- Updates the MCP TypeScript SDK and UUID dependencies while preserving Node.js 18 support.
See CHANGELOG.md for the full change list.