Skip to content

v1.1 — Hardening Release

Choose a tag to compare

@steathy steathy released this 14 May 03:50
· 28 commits to main since this release

Major hardening release. 50+ fixes from 19 rounds of code review. No new features — focused entirely on correctness, robustness, and security.

Added

  • Binary SHA-256 verification for sandbox binaries
  • Opt-in credential redaction (--redact)
  • Blocklist toggle (--no-blocklist)
  • Config validation with safe type casts
  • 83 automated tests

Fixed

  • %restore deadlock (Lock → RLock)
  • Sandbox hard-timeout crash
  • Binary body corruption in read_transaction
  • Multi-tab CDP body capture
  • Cookie value leak with --redact
  • Video temp file leak
  • 20+ additional fixes

Changed

  • MCP server startup deferred (import time ~3500ms → ~20ms)
  • make_serializable handles bytes via base64