RepoJournal
Agent Security Agent Security
37 wires and counting

$ follow Agent Security

Keep up with Agent Security in about 3 minutes: what actually shipped — the commits, pull requests, releases, and security advisories that matter.

or

fair warning: these emails are deeply technical. diffs, version numbers, CVEs, benchmark deltas. if that's not your idea of a good read, this isn't your newsletter.

Folds into your digest — weekly by default, monthly if you prefer. Unsubscribe in one click.

$ status

wire 2026-11-08
stories 4

© 2026 RepoJournal Home Showcase How it works Privacy

$ the-wire · showcase

Hypervisor event queries stop returning everything on limit=0

By RepoJournal · Filed · About Agent Security · Composed from the cited sources · methodology

Two upstream fixes in microsoft/agent-governance-toolkit tighten behavior operators can already hit: event queries with a zero limit and task failure transitions that wrote errors onto finished tasks.

fix(agent-hypervisor): return no events for an event query limit of 0 (#4491) microsoft/agent-governance-toolkit

by Shivam Sharma

HypervisorEventBus.query kept the trailing events with results[-limit:], and because results[-0:] is the whole list, a limit of 0 returned every matching event; a negative limit instead silently dropped the oldest ones. It now returns an empty list for 0, raises ValueError for a negative limit, and GET /api/v1/events rejects limit < 0, so any dashboard or exporter that passed 0 meaning "none" n...

fix(a2a-protocol): keep a task's error when fail() is rejected (#4488) microsoft/agent-governance-toolkit

by Shivam Sharma

TaskEnvelope.fail set error before checking the transition, so failing an already complete, failed or canceled task raised ValueError but overwrote error anyway, leaving a completed task serialised with an error and a failed task stripped of its original one. The transition is now checked first and error is set only once the task is failed, which matters to any consumer reading error off task p...

Quick answers

What shipped in Agent Security on November 8, 2026?
Two upstream fixes in microsoft/agent-governance-toolkit tighten behavior operators can already hit: event queries with a zero limit and task failure transitions that wrote errors onto finished tasks. In total, 2 commits and 2 pull requests landed.
Who contributed to Agent Security on November 8, 2026?
1 developer shipped this update, including Shivam Sharma.
What were the notable Agent Security updates?
fix(agent-hypervisor): return no events for an event query limit of 0 (#4491) and fix(a2a-protocol): keep a task's error when fail() is rejected (#4488).