v0.17.0
v0.17.0: opt-in sandbox hardening (default unhardened) The 5 sandbox-hardening mitigations (freeze ops, neutralize proxy-details, neutralize introspection, remove __bootstrap, remove SharedArrayBuffer/Atomics) are now individually opt-in via --harden-* flags / MCP_V8_HARDEN_* env vars and OFF by default. BEHAVIOR CHANGE: mcp-v8 now runs unhardened unless mitigations are explicitly enabled.