MXC SDK v0.8.0

MXC v0.8.0

MXC v0.8.0 is focused on a more consistent, fail-closed sandboxing experience across Windows, Linux, and macOS.

NPM release: https://www.npmjs.com/package/@microsoft/mxc-sdk/v/0.8.0

See assets section for the mxc-release-binaries.zip file which contains all signed production binaries + pdbs for the MXC project.

What's New in v0.8.0

Schema 0.8 is now stable

0.8.0-alpha is now the current immutable stable policy schema and the recommended version for new policies. Existing 0.6 and 0.7 policies remain supported.

Stronger cross-platform networking

The new directional network policy separates:

• Outbound traffic with IP/CIDR, protocol, and port rules
• Inbound and host-loopback access
• Container HTTP/S proxy configuration

Network permissions remain deny-by-default. ProcessContainer, Bubblewrap, LXC, and Seatbelt now validate the shared 0.8 contract and reject policies they cannot safely enforce instead of silently weakening them.

Safer proxy-only egress

Windows Process Container, Bubblewrap, LXC, and Seatbelt support schema 0.8 proxy-only egress on their enforcing paths. When platform prerequisites are met, MXC blocks direct network access and permits only the configured loopback HTTP/S proxy endpoint. Unsupported policy combinations are rejected rather than silently weakened.

Windows ProcessContainer proxy configurations have additional platform-specific requirements. See the ProcessContainer schema 0.8 proxy example for configuration and support details.

Windows ProcessContainer diagnostics

On Windows, ProcessContainer adds Learning Mode-powered denial capture. Applications can record resources blocked by a policy, use those results to refine the policy, and receive more actionable platform error details through the SDK. See the Learning Mode and denial-capture documentation.

Windows ProcessContainer availability

Important

To use the latest Windows ProcessContainer features today, use Windows Insider Preview Build 26340.9212 or higher.

Windows 11 24H2 and 25H2 machines do not yet include all of the required OS-side changes, so ProcessContainer will not be fully featured on those builds. Updates bringing these changes to 24H2 and 25H2 are expected in the coming weeks.

Experimental backend progress

WSLc, IsolationSession, and Windows Sandbox gain major state-aware lifecycle improvements. These backends still require explicit experimental opt-in and are not part of the stable schema surface.

Change log

• Add NANVIX_BIN env var for offline nanvix binary prefetching by Huzaifa Danish (@huzaifa-d) in #519
• ci: restore templateContext.rust so 1ES Setup/Restore work on the official build by Branden Bonaby (@bbonaby) in #526
• ci(gha): mirror ADO PR pipeline as split, reusable GHA workflows by Branden Bonaby (@bbonaby) in #510
• ci: split official and unofficial 1ES pipeline entry points by Branden Bonaby (@bbonaby) in #522
• ci: fix versioning Rust toolchain sync check for new template layout by Branden Bonaby (@bbonaby) in #529
• NanVix backend: host networking support by Huzaifa Danish (@huzaifa-d) in #531
• chore: bump hyperlight-unikraft to v0.10.0 by Dan Chiarlone (@danbugs) in #534
• [LXC] Enable LXC integration tests on GHA Linux runners by Soham Das (@SohamDas2021) in #532
• [WSLC] Reject UNC paths in WSLC filesystem policy by Soham Das (@SohamDas2021) in #537
• fix(bwrap): default to deny-by-default filesystem (mirror seatbelt) by Carlos Alexandro Becker (@caarlos0) in #482
• chore: declare MIT license metadata for all crates by Carlos Alexandro Becker (@caarlos0) in #538
• chore(deps-dev): bump tar from 7.5.13 to 7.5.16 in /sdk by Dependabot (@dependabot)[bot] in #536
• chore(deps-dev): bump form-data from 4.0.5 to 4.0.6 in /tests/playground by Dependabot (@dependabot)[bot] in #535
• chore(deps-dev): bump undici from 6.26.0 to 6.27.0 in /tests/playground by Dependabot (@dependabot)[bot] in #548
• test(e2e): characterize executor run-to-completion behavior by Gudge (@MGudgin) in #540
• Prune orphaned-state DACL ACEs whose target no longer exists by Gudge (@MGudgin) in #517
• ci: pin rustup-init version and verify SHA-256 in the public toolchain template by Gudge (@MGudgin) in #502
• Centralize the tempfile dev-dependency in workspace deps by Gudge (@MGudgin) in #516
• Remove GitHub build exclusions by Branden Bonaby (@bbonaby) in #549
• Remove stale TS CLI References by Gudge (@MGudgin) in #539
• [WSLC] Enable portMappings for WSLC (TCP host->container forwarding) by Soham Das (@SohamDas2021) in #530
• Schema codegen: generate the dev schema from the Rust wire model by Gudge (@MGudgin) in #543
• Fix JOB_OBJECT_UILIMIT probe assertions in Win25H2Safe-Tests by Gudge (@MGudgin) in #544
• docs(lxc): replace removed script setting in example config by Gudge (@MGudgin) in #545
• feat(wxc_common): add the sandbox execution interfaces (SandboxBackend / SandboxProcess / Runner) by Carlos Alexandro Becker (@caarlos0) in #554
• refactor(backends): unify the library backends on SandboxBackend + route binaries via Runner by Carlos Alexandro Becker (@caarlos0) in #555
• feat(mxc-sdk): add the importable in-process sandbox library crate by Carlos Alexandro Becker (@caarlos0) in #556
• Make the Windows process-container test harness capability-driven by Gudge (@MGudgin) in #547
• Add dedicated --allow-testing-features gate for builtinTestServer by Gudge (@MGudgin) in #542
• fix(appcontainer): suppress empty console window for piped sandbox children by Carlos Alexandro Becker (@caarlos0) in #569
• Phase 2B: deserialize the parser into the wire model by Gudge (@MGudgin) in #566
• Phase 2B follow-up: use From for wire->domain enum conversions by Gudge (@MGudgin) in #574
• Phase 2C: generate the SDK wire types from a Rust emitter by Gudge (@MGudgin) in #559
• Add filesystem policy path validation (same-path conflict, existence check) by Soham Das (@SohamDas2021) in #551
• Stage isolation_session test collateral into the OS vpack by Branden Bonaby (@bbonaby) in #583
• fix(backends): stop swallowing WinRT/decode failures that corrupt sandbox behavior by Gudge (@MGudgin) in #570
• Sign isolation_session PowerShell scripts staged into the vpack by Branden Bonaby (@bbonaby) in #590
• Phase 2.5: add state-aware SDK wire-type conformance by Gudge (@MGudgin) in #568
• Disable blank issues so all issues get a type set at creation by Demitrius Nelon (@denelon) in #601
• CI: resolve crate dependencies through the public MxcDependencies feed by Branden Bonaby (@bbonaby) in #594
• [Bubblewrap/LXC/WSLC] Add object-based filesystem-policy validation, most restrictive wins by Soham Das (@SohamDas2021) in #593
• ci: bump Lint macOS pool image to macOS-15-arm64 by Richie Gomez (@richiemsft) in #605
• [Bubblewrap/LXC/WSLC] Add filesystem-policy delegation check by Soham Das (@SohamDas2021) in #598
• Add state-aware phase field value conformance by Gudge (@MGudgin) in #595
• CI: add networkisolation featureFlag to onebranch pipeline so it can reachout to ESRP signing by Branden Bonaby (@bbonaby) in #609
• docs: add Windows OS-version policy-support matrix for processcontainer by Gudge (@MGudgin) in #606
• Add gh-aw issue triage workflow with semantic labeling and owner assignment by Huzaifa Danish (@huzaifa-d) with @Copilot in #602
• Plumb deniedPaths to BaseContainer fs_deny, gated on SANDBOX_CAP_FS_DENY by Gudge (@MGudgin) in #603
• chore: bump hyperlight-unikraft to v0.12.1 (crates.io) by Dan Chiarlone (@danbugs) in #591
• feat: add TraceLogging ETW telemetry (experimental) by RamonArjona4 in #493
• .gitignore updates by Gudge (@MGudgin) in #614
• refactor: idiomatic cleanups in wxc_common and the AppContainer/WSLC/LXC backends by Gudge (@MGudgin) in #573
• Fix issue-triage auth: use copilot-requests permission instead of PAT by Huzaifa Danish (@huzaifa-d) in #617
• Triage: reduce failure-report noise, scope repos, and guard against false missing_data by Huzaifa Danish (@huzaifa-d) in #619
• Permissive Learning Mode 1/6 audit skeleton by Lily Barkley (@lilybarkley-msft) in #584
• [Bubblewrap] Resolve bwrap policy mounts by most-specific-path-wins by Soham Das (@SohamDas2021) in #608
• Add CodeQL static analysis workflow for Rust and TypeScript by Huzaifa Danish (@huzaifa-d) in #621
• fix: missing license in mxc_telemetry by Carlos Alexandro Becker (@caarlos0) in #628
• Phase 3a: decouple ProcessContainer backend selection from schema version by Gudge (@MGudgin) in #580
• Phase 3b: raise the schema support floor to 0.6.0 by Gudge (@MGudgin) in #581
• Add shared plumbing for the Windows Sandbox rewrite (Phase 0) by Gudge (@MGudgin) in #576
• User/shschaefer/rust lib by shschaefer in #635
• Fix gh-aw triage: gateway crash hotfix + fill owner-map assignment gap by Huzaifa Danish (@huzaifa-d) in #639
• Added lxc bubblewrap wslc roadmap by Soham Das (@SohamDas2021) in #533
• Create a common SDK folder. Rename csharp to dotnet SDK and TS to node. by shschaefer in #642
• Add process container tests for uncovered cases. by shschaefer in #644
• Enable community issue triage: open roles + integrity gates by Huzaifa Danish (@huzaifa-d) in #646
• [Bubblewrap] Mask denied files with a /dev/null bind instead of tmpfs by Soham Das (@SohamDas2021) in #623
• Add GA networking spec by Branden Bonaby (@bbonaby) in #615
• add process container networking GA spec by Branden Bonaby (@bbonaby) in #616
• Phase 3c: formalize the three version axes and the negotiation flow by Gudge (@MGudgin) in #582
• fix(sdk): reach the AppContainer + DACL tier from the streaming path by Carlos Alexandro Becker (@caarlos0) in #645
• Rewrite the Windows Sandbox one-shot path onto an authenticated protocol (Phase 1) by Gudge (@MGudgin) in #577
• refactor(proxy): rename and unix-generalize the shared cooperative proxy machinery by Carlos Alexandro Becker (@caarlos0) in #654
• feat(seatbelt): add cooperative network proxy support by Carlos Alexandro Becker (@caarlos0) in #629
• telemetry: implement deferred crash/cancellation/state-aware lifecycle instrumentation by RamonArjona4 in #624
• Add the Windows Sandbox state-aware lifecycle + host daemon (Phase 2) by Gudge (@MGudgin) in #578
• [WSLC] Reject nested deniedPaths overlaps in WSLC policy mapping by Soham Das (@SohamDas2021) in #650
• Add SDK state-aware support for the Windows Sandbox backend (Phase 3) by Gudge (@MGudgin) in #579
• Add streaming and state-aware lifecycle to the C ABI and .NET SDK by shschaefer in #651
• [LXC] Address file system policy gaps by Darren Hoehna (@dhoehna) in #630
• [WSLC] Consume WSLC SDK from MxcDependencies feed (2.9.3) by Soham Das (@SohamDas2021) in #664
• [LXC] Fix denied-symlink and most-specific masking that aborted the container by Darren Hoehna (@dhoehna) in #662
• Permissive Learning Mode 2/6 filesystem extraction by Lily Barkley (@lilybarkley-msft) in #585
• chore(deps): bump fast-uri from 3.1.2 to 3.1.4 in /scripts/versioning by Dependabot (@dependabot)[bot] in #671
• chore(deps-dev): bump tar from 7.5.16 to 7.5.21 in /sdk/node by Dependabot (@dependabot)[bot] in #672
• [WSLC] Add on-disk alias canonicalization to denied-path overlap check by Soham Das (@SohamDas2021) in #657
• [Bubblewrap/LXC/WSLC] Update roadmap doc by Soham Das (@SohamDas2021) in #675
• Harden the Windows Sandbox state-aware daemon and lifecycle by Gudge (@MGudgin) in #658
• Add processContainer.captureDenials config for Windows denial capture by Richie Gomez (@richiemsft) in #663
• Consume the Windows Learning Mode trace API: FFI loader + capture lifecycle by Richie Gomez (@richiemsft) in #661
• [WSLC] Generate WSLC SDK FFI bindings with bindgen by Soham Das (@SohamDas2021) in #669
• feat: add maintainer issue investigation workflow by Huzaifa Danish (@huzaifa-d) in #665
• [WSLC] Add cooperative HTTP/HTTPS proxy support by Soham Das (@SohamDas2021) in #652
• Inject and validate the two learning-mode capabilities by Richie Gomez (@richiemsft) in #622
• Revert "[WSLC] Add cooperative HTTP/HTTPS proxy support" by Soham Das (@SohamDas2021) in #697
• Drop zip default features in wslc_common to remove aes/sha1 by Gudge (@MGudgin) in #698
• Phase 3d: add actionable configuration parse errors by Gudge (@MGudgin) in #641
• Bring network wire schema to full GA spec (wire.rs + config fixtures only) by Darren Hoehna (@dhoehna) in #676
• Revert "Bring network wire schema to full GA spec" (PR676) by Gudge (@MGudgin) in #707
• Permissive Learning Mode 3/6 Config Generation by Lily Barkley (@lilybarkley-msft) in #586
• Fix playground build by pointing at the real SDK package directory by Gudge (@MGudgin) in #704
• [WSLC] Reapply "[WSLC] Add cooperative HTTP/HTTPS proxy support" by Soham Das (@SohamDas2021) in #713
• Add iso session test bundle for os vpack by Branden Bonaby (@bbonaby) in #692
• [Bubblewrap] Fix proxy tests by using non-rate-limited origin by Soham Das (@SohamDas2021) in #719
• Fix VPack CodeSign validation for test bundle by Branden Bonaby (@bbonaby) in #720
• [Bubblewrap] Gate platform detection on a minimum bwrap version by Carlos Alexandro Becker (@caarlos0) in #714
• [WSLC] Alias cannonicalization follow-up in denied-path overlap validator by Soham Das (@SohamDas2021) in #680
• Fix npm audit advisories and deprecated packages in Node projects by Gudge (@MGudgin) in #705
• fix(wslc): clarify WSL runtime prerequisite by Huzaifa Danish (@huzaifa-d) in #656
• Wire captureDenials to Windows Learning Mode runtime by Richie Gomez (@richiemsft) in #696
• Add sealed ETL denial analysis (replacement for #699) by Richie Gomez (@richiemsft) in #709
• Emit captureDenials JSON output (replacement for #701) by Richie Gomez (@richiemsft) in #710
• Fix cross-compile on Windows hosts by Gudge (@MGudgin) in #736
• Permissive Learning Mode 4/6 Capability by Lily Barkley (@lilybarkley-msft) in #587
• chore(deps-dev): bump ip-address from 10.2.0 to 10.4.0 in /sdk/node by Dependabot (@dependabot)[bot] in #741
• chore(deps-dev): bump undici from 6.27.0 to 6.28.0 in /tests/playground by Dependabot (@dependabot)[bot] in #743
• chore(deps): bump fast-uri from 3.1.4 to 3.1.5 in /scripts/versioning by Dependabot (@dependabot)[bot] in #742
• Update Base Container flatbuffer schema with new generation from OS and pass in Networking default allow/deny policy by Branden Bonaby (@bbonaby) in #744
• Make WSLC an available backend on the Rust SDK by Carlos Alexandro Becker (@caarlos0) in #687
• fix(seatbelt): allow AF_UNIX sockets and resolve symlinked root paths by Carlos Alexandro Becker (@caarlos0) in #749
• fix(bwrap): surface allowLocalNetwork settings the Bubblewrap backend cannot honor by Carlos Alexandro Becker (@caarlos0) in #750
• docs(seatbelt): correct rule-precedence and listen() rationale by Carlos Alexandro Becker (@caarlos0) in #754
• Remove check_refs_volumes from basecontainer and appcontainer by Daniel (@daniedud-MSFT) in #756
• Update Learning Mode to V2 API contracts by Richie Gomez (@richiemsft) in #739
• feat(sdk): add captureDenials to the typed SandboxPolicy by Carlos Alexandro Becker (@caarlos0) in #748
• Harden Linux SDK dependency setup by Richie Gomez (@richiemsft) in #770
• Add backend support probe API design & discussion doc by Huzaifa Danish (@huzaifa-d) in #717
• Consolidate Learning Mode analyzer coverage by Richie Gomez (@richiemsft) in #759
• feat(engine): Rust host-backend detectors + available_backends() probe by Huzaifa Danish (@huzaifa-d) in #725
• Add fail-closed base resolution and SemVer libraries for the versioning gates by Gudge (@MGudgin) in #730
• [LXC] Filter IPv6 destinations and CIDR ranges in firewall mode (AB#62830559) by Darren Hoehna (@dhoehna) in #724
• [WSLC] Reject unenforceable network schema at parse time by Soham Das (@SohamDas2021) in #681
• Migrate the isolation_session backend and SDK to the IsolationSession Preview API by adpa-ms in #761
• Make the isolation-session test suites clean up after themselves and verify their cleanup by adpa-ms in #800
• Enable publishing the PSEC bindings crate by Richie Gomez (@richiemsft) in #782
• [WSLC] State-aware lifecycle (PR 1/3): persistent daemon + named-pipe IPC control plane by Soham Das (@SohamDas2021) in #745
• feat(sdk): probe denial capture support by Carlos Alexandro Becker (@caarlos0) in #778
• Add Windows filepath behavior clarifications by mapalko in #666
• fix(appcontainer): resolve the sandbox cwd to a usable granted directory instead of NULL by Carlos Alexandro Becker (@caarlos0) in #674
• test(seatbelt): e2e guard for un-resolved $TMPDIR read-write grants by Carlos Alexandro Becker (@caarlos0) in #659
• [LXC] Eliminate accidental firewall chain name collisions by Darren Hoehna (@dhoehna) in #780
• [WSLC] Harden state-aware daemon (PR 2a/3): typed errors, validate-then-admit exec, idle-watchdog by Soham Das (@SohamDas2021) in #767
• Pin GitHub Actions to full-length commit SHAs by Microsoft Open Source Security Bot (@OssSecurityBot) in #740
• chore(deps): bump the github-actions group with 9 updates by Dependabot (@dependabot)[bot] in #808
• chore(deps-dev): bump js-yaml from 4.3.0 to 4.3.1 in /tests/playground by Dependabot (@dependabot)[bot] in #773
• chore(deps): bump github/gh-aw-actions/setup from 0.85.0 to 0.85.1 in the github-actions group by Dependabot (@dependabot)[bot] in #823
• Prefer PSEC when available by Jeff Whiteside (@jsidewhite) in #812
• Add Copilot-Instructions label policy rule by Demitrius Nelon (@denelon) in #763
• [WSLC] State-aware sandbox lifecycle over the experimental.wslc surface (PR 2b/3) by Soham Das (@SohamDas2021) in #801
• Refactor PLM to use the canonical Learning Mode analyzer by Richie Gomez (@richiemsft) in #760
• Add mxc_config_contract crate for version-specific config parsing by Gudge (@MGudgin) in #807
• Add exact 0.6 configuration contract by Gudge (@MGudgin) in #816
• Package and sign PLM with Windows binaries by Richie Gomez (@richiemsft) in #834
• Relay live exec pipes to executor stdio by adpa-ms in #829
• Update network policy docs with clarifications and examples by Branden Bonaby (@bbonaby) in #811
• fix(logger): deliver security warnings explicitly instead of writing to stderr by Carlos Alexandro Becker (@caarlos0) in #803
• Add 0.6 configuration contract adapter by Gudge (@MGudgin) in #835
• Add capture ETL retention option by Richie Gomez (@richiemsft) in #774
• [WSLC] State-aware lifecycle: live exec output streaming + provision fs-delegation gate (PR 2c/3) by Soham Das (@SohamDas2021) in #806
• Document process containers proxy packaging and deployment for developers by Branden Bonaby (@bbonaby) in #814
• chore(deps-dev): bump fast-uri from 3.1.4 to 3.1.5 in /tests/playground by Dependabot (@dependabot)[bot] in #842
• [WSLC] Fix runner use-after-free and session boot timeout (Closes #722) by Soham Das (@SohamDas2021) in #846
• Fix inherited output handle test race by Richie Gomez (@richiemsft) in #848
• [WSLC] State-aware lifecycle (PR 3/3): TypeScript SDK per-phase policy configs by Soham Das (@SohamDas2021) in #810
• Give an in-process caller real exec streams from the isolation-session backend by adpa-ms in #839
• Enforce inbound default-deny for LXC containers by Darren Hoehna (@dhoehna) in #836
• Recognize the absent-chain message both iptables backends emit by Darren Hoehna (@dhoehna) in #863
• Add 0.7 configuration contract and adapter by Gudge (@MGudgin) in #838
• Document 0.7 contract annotations by Gudge (@MGudgin) in #907
• Align 0.7 adapter tests with backend constraints by Gudge (@MGudgin) in #912
• Report a timeout and a refused kill through the state-aware exec handle by adpa-ms in #874
• [Bubblewrap] Scrub inherited FTP proxy env variables by Soham Das (@SohamDas2021) in #914
• [Bubblewrap] Fix denied-masking test fixture ownership by Soham Das (@SohamDas2021) in #915
• [LXC] Enforce the deny-all-except-proxy network policy (model 2) by Darren Hoehna (@dhoehna) in #798
• Fix FTP proxy environment spec on main by Soham Das (@SohamDas2021) in #923
• Add guarded WPR captureDenials fallback by Richie Gomez (@richiemsft) in #813
• First Version of E2E Validation Infrastructure by Elliot (@theelliotm) in #809
• Unify audit with capture denial routing by Richie Gomez (@richiemsft) in #847
• Guard the proxy key contract against hand-written expectations by Darren Hoehna (@dhoehna) in #926
• Improve diagnostics for policy-blocked sandbox launches by Ross Nichols (@rossnichols) in #928
• fix(seatbelt): allow signaling sandbox children by Carlos Alexandro Becker (@caarlos0) in #934
• Add 0.8 one-shot configuration contract by Gudge (@MGudgin) in #909
• Carry the failing API's detail through the in-process SDKs by adpa-ms in #925
• Add captureDenials to the .NET SDK by Richie Gomez (@richiemsft) in #938
• [Bubblewrap] Run proxy mode in a private network namespace via rootless slirp4netns (schema 0.8.0+) by Soham Das (@SohamDas2021) in #930
• Let an in-process caller opt in to the experimental backends by adpa-ms in #954
• Add 0.8 one-shot configuration adapter by Gudge (@MGudgin) in #910
• Document 26340.9212 as the isolation_session minimum build by adpa-ms in #959
• Require a positive LocalAgentUser feature level for isolation_session by adpa-ms in #960
• Use FlatBuffers Object API for OS Policy Serialization by Branden Bonaby (@bbonaby) in #933
• Add 0.8 state-aware configuration contracts by Gudge (@MGudgin) in #929
• Add 0.8 state-aware configuration adapters by Gudge (@MGudgin) in #941
• Strengthen string enum contract coverage by Gudge (@MGudgin) in #949
• Add additive schema 0.8 networking contract by Branden Bonaby (@bbonaby) in #961
• Validate 0.8 networking schema by backend by Branden Bonaby (@bbonaby) in #962
• Document stable telemetry privacy contract by RamonArjona4 in #818
• [Bubblewrap] Enforce proxy-only egress for private networking by Soham Das (@SohamDas2021) in #931
• CI Validation Infra: fixes for WSLC test prereqs, Windows log collection, LXC bridge NAT, and rate limits by Elliot (@theelliotm) in #939
• [Bubblewrap] Support hostname proxy endpoints under proxy-only egress by Soham Das (@SohamDas2021) in #940
• CI Validation Infra: Added OS ver. that supports Isolation Session and added new Bubblewrap prereqs by Elliot (@theelliotm) in #973
• Support for passing appId to IsolationSession upon sandbox provision by Dom Giandinoto (@daamenik) in #802
• [Bubblewrap] Enforce network.enforcementMode='firewall' and reject unhonorable network elements at schema 0.8+ by Soham Das (@SohamDas2021) in #956
• Expose the isolation-session backend through the Rust SDK and the C ABI by adpa-ms in #985
• Clarify 0.8 proxy host-loopback comments by Branden Bonaby (@bbonaby) in #989
• [Bubblewrap] Deny inbound connections and batch firewall rule installation by Soham Das (@SohamDas2021) in #964
• Validate exact contract capabilities by Gudge (@MGudgin) in #966
• Clarify separate capability entries by Gudge (@MGudgin) in #986
• [Bubblewrap] Map the 0.8 directional network schema onto Bubblewrap and declare what it enforces by Soham Das (@SohamDas2021) in #979
• [ProcessContainer] Enforce schema 0.8 networking by Branden Bonaby (@bbonaby) in #976
• [Node SDK] Add 0.8 network policy authoring by Branden Bonaby (@bbonaby) in #977
• [Docs] Add schema 0.8 sandbox policy reference by Branden Bonaby (@bbonaby) in #993
• Add versioned development contract codegen by Gudge (@MGudgin) in #968
• Add verbose Learning Mode denial logging by Richie Gomez (@richiemsft) in #916
• Publish schema 0.8 and open 0.9 development by Branden Bonaby (@bbonaby) in #996
• Increase official build job timeouts to two hours by Branden Bonaby (@bbonaby) in #997
• Implement schema 0.8 network policy for the LXC backend by Darren Hoehna (@dhoehna) in #983
• Realign Seatbelt with the official 0.8 GA networking schema by Elliot (@theelliotm) in #974
• Update package versions to 0.8.0 by Branden Bonaby (@bbonaby) in #1006
• Fix npm package SBOM generation under network isolation by Branden Bonaby (@bbonaby) in #1007

New Contributors

• RamonArjona4 made their first contribution in #493
• Lily Barkley (@lilybarkley-msft) made their first contribution in #584
• Darren Hoehna (@dhoehna) made their first contribution in #630
• Daniel (@daniedud-MSFT) made their first contribution in #756
• mapalko made their first contribution in #666
• Microsoft Open Source Security Bot (@OssSecurityBot) made their first contribution in #740
• Elliot (@theelliotm) made their first contribution in #809
• Ross Nichols (@rossnichols) made their first contribution in #928
• Dom Giandinoto (@daamenik) made their first contribution in #802

Full Changelog: v0.7.0...v0.8.0