$ the-wire · showcase
An opt-in OS-enforced Windows sandbox for srt
By RepoJournal · Filed · About Agent Security · Composed from the cited sources · methodology
sandbox-runtime gains a second Windows backend where the OS enforces filesystem and network policy, and Guardrails fixes a shape rejection that was failing valid text responses.
windows: opt-in MXC BaseContainer backend anthropics/sandbox-runtime
Setting `windows.backend: 'mxc'` now runs commands through Microsoft's MXC BaseContainer in process via `SandboxManager.spawnSandboxed()`, with no install step and no `wxc-exec` runner. Leaving the key unset keeps `srt-win`, so no existing config changes behavior until you opt in.
fix(server): accept image metadata and refresh OpenAI contracts NVIDIA-NeMo/Guardrails
Text-only upstream responses that carry `image.context_compression` were being rejected by the closed response projections as unsupported shapes. Absent or null `image`, or a closed object with `context_compression: enabled | disabled`, is now accepted across OpenAI Responses and LiteLLM Chat, including streaming snapshots and terminal metadata bags.
fix(agent-rag-governance): reject a negative max_retrievals_per_minute (#4484) microsoft/agent-governance-toolkit
A negative `max_retrievals_per_minute` used to be accepted by RAGPolicy, then fail every single retrieval with `RateLimitExceededError`, because the limiter treats only 0 as no limit. Policy construction now raises `ValueError` instead, so a bad config fails at startup rather than at query time.
fix(agent-lightning): count only accepted spans in emit_to_store (#4487) microsoft/agent-governance-toolkit
`FlightRecorderEmitter.emit_to_store` returned the number of spans read from the recorder; it now returns the number the store actually accepted. If you alert or assert on that return value, expect lower counts whenever a span's emit raises or the store exposes no `emit_span`/`add_span`.
docs(hooks): generate hooks server API reference NVIDIA-NeMo/Guardrails
The hooks server API reference and the experimental proxy reference are now generated from registered FastAPI routes, with contract tests against the running server and the live OpenAPI endpoint left disabled; the macOS arm64 test job moved to macos-15. Documentation coverage only, nothing to migrate.
