Skip to content

docs(release): correct two v0.5.9 release-note sentences #1008

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
jbojcic1 merged 1 commit into from
Sep 17, 2026
Merged

docs(release): correct two v0.5.9 release-note sentences #1008

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
9 changes: 5 additions & 4 deletions RELEASE_NOTES.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -72,8 +72,9 @@ one that fits it. **A seat that declares neither key is unchanged.**
credential proxy (#647) swaps the real credential into the `Authorization` header at egress, for
the vendor's host only, for the life of the job, and the job reaches a vendor-hosted MCP server
through `mcp-http-bridge`, now installed in the sandbox image. The docker alias pinhole opens only
when an MCP server entry names it, and the launch capture redactor knows every real credential
value a launch holds.
for a job outside namespace containment, and only when that job's environment or one of its MCP
server entries references the alias; the launch capture redactor knows every real credential value
a launch holds.
- **Holder** (`[[sandbox.held_tools]]`). The daemon runs one persistent holder container per declared
tool — `tool-holderd` from the new `maxplayer-tool-kit` crate, plus the vendor's own CLI. The
holder enrols once and resumes its login across restarts. Each job gets its own Unix socket per
Expand Down Expand Up @@ -109,8 +110,8 @@ difference is the reason to read this paragraph:
does not claim one.

The live tests are `#[ignore]`d and configured by environment — `seller_exec::mcp_tool_tests::live_*`
and `held_tool::live_tests::live_*` — and each bundle under `evidence/` carries a README stating
what it proves and its limits.
and `held_tool::live_tests::live_*` — and each of this feature's three bundles under `evidence/`
(the `20260914T…` directories) carries a README stating what it proves and its limits.

Two limits ship with the feature. The Holder route needs Docker Engine 26 or newer for the volume
subpath mount, and a seat too old for it fails its boot line rather than every awarded job. The
Expand Down
Loading