Skip to content

LightAgent v0.10.1

Latest
Latest

Choose a tag to compare

View all tags
@wxai-space wxai-space released this 04 Sep 17:33
v0.10.1
3c9434d
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Security Boundary and Runtime Hardening

Highlights

  • Arbitrary Python execution tools are no longer registered by default.
  • Added the bounded safe_expression tool and public evaluate_safe_expression() API for arithmetic and data-only expressions.
  • Added explicit enable_unsafe_python=True opt-in for legacy Python execution tools.
  • Added fail-closed SandboxProvider gating and the LA-SANDBOX error code for model tool calls.
  • Added trace policy events for blocked execution-capable tool calls.
  • Updated English and Chinese documentation, security guidance, tools documentation, and roadmap.

Compatibility

Existing applications that directly import and call execute_python_code, execute_python_file, or execute_python_code_stream retain those APIs. Applications relying on automatic registration must explicitly opt in with enable_unsafe_python=True and provide a real isolated SandboxProvider.

Security

The Python executor remains a controlled subprocess, not a security sandbox. Do not expose it to untrusted users without OS-level isolation, resource limits, filesystem/network restrictions, and an explicit policy/approval layer.

Verification

  • 275 tests passed, 1 skipped
  • Python 3.10, 3.11, 3.12, and 3.13 CI passed
  • compileall and git diff --check passed
Assets 2
Loading