Repository navigation
v1.1 — Hardening Release
Major hardening release. 50+ fixes from 19 rounds of code review. No new features — focused entirely on correctness, robustness, and security.
Added
- Binary SHA-256 verification for sandbox binaries
- Opt-in credential redaction (
--redact) - Blocklist toggle (
--no-blocklist) - Config validation with safe type casts
- 83 automated tests
Fixed
%restoredeadlock (Lock → RLock)- Sandbox hard-timeout crash
- Binary body corruption in
read_transaction - Multi-tab CDP body capture
- Cookie value leak with
--redact - Video temp file leak
- 20+ additional fixes
Changed
- MCP server startup deferred (import time ~3500ms → ~20ms)
make_serializablehandles bytes via base64