RepoJournal
Agent Security Agent Security
25 wires and counting

$ follow Agent Security

Keep up with Agent Security in about 3 minutes: what actually shipped — the commits, pull requests, releases, and security advisories that matter.

or

fair warning: these emails are deeply technical. diffs, version numbers, CVEs, benchmark deltas. if that's not your idea of a good read, this isn't your newsletter.

Folds into your digest — weekly by default, monthly if you prefer. Unsubscribe in one click.

$ status

wire 2026-10-25
stories 2
RSS Archive Reviews

© 2026 RepoJournal Home Showcase How it works Privacy

$ the-wire · showcase

Windows install error message drops the @anthropic-ai scope

By RepoJournal · Filed · About Agent Security · Composed from the cited sources · methodology

ant-kurt
1 person shipped this
ant-kurt @ant-kurt 2 cited

Anthropics/sandbox-runtime corrected the npx command its Windows install errors print, so the text a stuck operator copies now matches the package name in the README.

windows: correct the npx command for windows-install anthropics/sandbox-runtime

by ant-kurt

The error text used to tell Windows users to run `npx sandbox-runtime windows-install`; it now prints `npx @anthropic-ai/sandbox-runtime windows-install`, the scoped spec the README documents. The spelling lives in a single constant with a test keeping `src/` and the README aligned, so the wrong-scope suggestion should not drift back in.

Merge pull request #774 from anthropics/claude/slack-thread-fix-8rtgzm anthropics/sandbox-runtime

by ant-kurt

The merge that landed the fix. Nothing else rode along: if you hit the unscoped command in an older build, use the scoped form instead and the install behaves as documented.

$ ls agent-security/reviews/ # the step-back reads

the week in review Agent hypervisor now checks commands behind sudo, doas, xargs
Full archive → Weekly reviews →

Quick answers

What shipped in Agent Security on October 25, 2026?
Anthropics/sandbox-runtime corrected the npx command its Windows install errors print, so the text a stuck operator copies now matches the package name in the README. In total, 1 commits and 1 pull requests landed.
Who contributed to Agent Security on October 25, 2026?
1 developer shipped this update, including ant-kurt.
What were the notable Agent Security updates?
windows: correct the npx command for windows-install and Merge pull request #774 from anthropics/claude/slack-thread-fix-8rtgzm.
♥

$ log Agent Security --recent

Sandbox-runtime fixes the Windows install command in its error output 2 shipped Guardrails ships hooks-server proxy stack, sandbox-runtime closes a SOCKS MITM bypass 30 shipped Windows push keys survive uninstall, and managed installs can skip absent agents 16 shipped Guardrails exposes hooks over HTTP, certifi floor raised in agent-scan 26 shipped

$ log --all # elsewhere on the wire

Alignment & Post-training verl fixes three environment-level breakages in Megatron and vLLM AI Red Teaming Promptfoo moves off vulnerable MSAL, PyRIT adds a char-split attack and cloud token detection

$ ls showcases/

Safety Evals AI Red Teaming Interpretability Alignment & Post-training

$ init your-desk

RepoJournal can write one of these for any repo you care about. Sign in with GitHub, pick your repos and sources, and your desk gets a wire like this one every morning.