feat: v0.1.96#1124

Merged

Henry-811 merged 9 commits into

mainfrom

Jun 10, 2026

Commits on Jun 10, 2026

feat(sandbox): add OS-level SRT execution sandboxing (command_line_execution_mode: srt)

ncrispino
and
claude
committed
feat(security): harden PathPermissionManager hook against file-tool sandbox escapes

ncrispino
and
claude
committed
feat(sandbox): configurable SRT read confinement (default: confined to workspace+context)

ncrispino
and
claude
committed
feat: v0.1.96
Henry-811
committed
fix(sandbox): re-allow framework read roots so fs-tools MCP server starts under confined SRT

ncrispino
and
claude
committed
docs(release): prepare v0.1.96 — OS-Level Agent Sandboxing

ncrispino
and
claude
committed
Merge branch 'dev/v0.1.96' into feat/better-sandboxing
Henry-811
authored
Merge pull request #1125 from massgen/feat/better-sandboxing
Henry-811
authored
update docs
Henry-811
committed