Repository navigation
Sando 0.4.2
Changelog: 0.4.2
0.4.2
This release keeps the public surface focused on deterministic local routing, bounded output, and honest provider accounting.
Added
- F1 context-footprint audit with explicit categories, provenance, and
unavailableresults when the host body is not observable. - F3 result disclosure with redaction, bounded inline output, artifact handles, and bounded recovery where an artifact was admitted.
- F4 lazy MCP gateway with an explicit allowlist, local catalog and call surface, and a kill switch.
- Provider-proxy capture for supported initial context bodies and bounded provider usage evidence.
Changed
- Claude, Codex, and plugin bundles now share the same generated implementation for the supported surfaces.
- Telemetry events use the v2 schema. Mechanical estimates and provider-reported usage remain separate.
- Already queued v1 aggregate rows are preserved and drained during the v2 rollout.
Fixed
- Oversized redacted results stay within the inline byte limit when artifact admission fails.
- Result and history disclosures identify what was elided and whether recovery is available.
- MCP artifact recovery stays read-only and bounded.
Boundaries
- F4 stays disabled unless an operator supplies an explicit configuration.