Agent Security — full archive
16 daily briefings · 2 reviews.
$ ls agent-security/reviews/ # the step-back reads
- week sandbox-runtime 0.0.79 fixes path denies that never applied
- week MCP receipt verifier rejects unsigned chains
- Approval digests get RFC 8785 float serialization; sandbox-runtime 0.0.80 kills a 300 ms path
- Sandbox-runtime closes silent data loss, Agent Guard gets release 0.6.9
- Guardrails adds CEL rules per tool, agent-scan stops missing Copilot CLI projects
- Guardrails streams OpenAI Chat under guard, sandbox-runtime goes namespace-strict on Linux
- Configurable secret patterns, and a sandbox that can start anywhere
- sandbox-runtime ranks Windows denies and stops path brackets from breaking wraps
- sandbox-runtime tightens read denies and cleans up mounts
- A proxy that corrupts the next request, and a clearer bwrap refusal
- Policy engine pins agent-control-spec 0.4.0-alpha.4, deprecates REMOVED_MANIFEST_FIELDS
- Guardrails adds tool-call rails, sandbox-runtime closes deny escapes
- Sandbox proxy crash fix, Guardrails tool-rail reasons, multidict patched
- agent-scan upgrades mcp to 1.30.0, discovers MCP servers hidden in VS Code extensions
- Sandbox path literals land, compliance scores stop lying
- Sandbox-runtime fixes Linux wrap that re-read a file a deny rule had just blocked
- Recursive-delete enforcement returns to the CLI plugins
- Unsigned MCP receipts rejected, Linux sandbox denies tightened
Never miss a Agent Security briefing.
Get Agent Security's week in review every Monday - and security advisories the day they land. Free, unsubscribe in one click.
One click. Every Monday: what mattered across the projects you've been reading (or our AI picks) — security news same-day. You refine anytime. Choose specific journals · Read a sample issue →