$ the-wire · showcase
Hardening security-guidance reviews, CLI 2.7.0, self-hosted sandboxes
By RepoJournal · Filed · About Anthropic · Composed from the cited sources · methodology
![anthropic-sdks-releaser[bot]](https://avatars.githubusercontent.com/u/76263028?v=4)
![claude[bot]](https://avatars.githubusercontent.com/in/1236702?v=4)
6 people shipped this
The security-guidance plugin landed five behavioral fixes to how it runs and records commit reviews, while anthropic-cli shipped v2.7.0 and a first sandboxes release with Helm chart and registry images.
Merge pull request #6965 from anthropics/mhegazy/sg-agentic-stop-on-auth anthropics/claude-plugins-official
The commit reviewer now stops when credentials are refused and ends hung reviews on a timer; the release text says it will "stop the commit reviewer on refused credentials, end hung reviews in time." A reviewer that previously sat on a bad auth state now terminates instead of stalling.
Merge pull request #6627 from anthropics/mhegazy/sg-review-sessions-not-saved anthropics/claude-plugins-official
Review runs are no longer written out as session transcripts. Anything downstream that expected security-guidance output to appear in session history will no longer find it there.
sandboxes-v0.1.0 anthropics/anthropic-cli
sandboxes-v0.1.0 publishes the dispatcher, sandbox, and sandbox source images plus the Helm chart to Google Artifact Registry, so Claude Managed Agents sandboxes can run self-hosted on Kubernetes. The dispatcher image is tagged cma-dispatcher:0.1.0 under us-docker.pkg.dev/anthropic-public-registry/sandboxes.
v2.7.0 anthropics/anthropic-cli
v2.7.0 adds API support for signing organization members out everywhere, and fixes apply so a deployment, environment, vault, or memory store is not reported as changed outside your config while its updated_at has not moved, nor an agent flagged when the API starts returning a new field. The client also stopped querying the terminal for its background color outside the explore view.
Merge pull request #7004 from anthropics/mhegazy/sg-git-program-from-path anthropics/claude-plugins-official
Also in security-guidance: git now starts by its full path on Windows, project config files are read only as real files, and a renamed file stays paired with its old name in the Stop review.
