v0.13.0
·
140 commits
to master
since this release
Removed agent command-denial policies and the agent command inspection command.
Command restrictions were removed because application-level command wrappers cannot provide a reliable security boundary across all agents and elevated execution paths.
Retained protections
- Agent Proxy credential injection and HTTP policy enforcement
- Egress host restrictions
- Filesystem restrictions within the supported OS sandbox
- Agent profile validation, inspection, and audit logging
Future command restrictions may return with a containerized execution backend that provides a stronger, consistent boundary.