Tools
Qwen Code adds a hidden attestation-only worker process for its managed runtime
QwenLM/qwen-code PR #12506, merged 2026-09-23, adds a hidden `qwen managed-runtime-worker` that starts without the CLI, model, harness or tool stack. It accepts one bounded boot document on stdin, listens only on a loopback port, exposes one v2 attestation route, and prints a ready record with no token. It rejects input over 32 KiB, unknown fields, or stdin left open past 30 seconds. A Java SDK attestation client (#12522) merged the same day. Both point at an enterprise broker that verifies which agent runtime it is talking to.
Source
↳ Follow the thread