Fetching from the wire…
01
02
03
04
05
06
07
08
Public story · 2026-08-03 · high
The same release also seals denied secrets out of the sandbox and bills for proven activity, not wall-clock time.
Why now: Suna shipped 0.12.0 on August 1 and a 0.12.1 patch the next day, per the project's release notes.
Suna 0.12 rewrote tool approval, secrets, and sandbox billing on August 1, per the project's release notes. That closes a real gap for teams that let agents run SQL or hit internal APIs. Approving run_sql once used to approve every future query, no matter what it ran.
Sessions start locked down by default. Connectors and secrets need explicit opt-in scope, agents can require specific connector profiles, and each profile carries its own authorization strategy. Secrets that get denied never enter the sandbox at all, so there's nothing left to leak later.
Approval prompts now show the full tool arguments, so whoever clicks approve can see exactly what's about to run. Suna also added a centralized audit log covering every API request and agent action with client attribution, plus per-session cost records.
Sandbox billing switched from wall-clock time to liveness evidence, charging for proof the sandbox was actually running rather than just elapsed minutes.
Each link below shares sources, entities, or timing with this story.
Shared entity: August / Same source domain / Shared topic / Earlier coverage
Both cover August; reported by the same outlet (github.com); overlapping topics (against, agent, argument).
Shared entity: August / Same source domain / Shared topic / What happened next
Both cover August; reported by the same outlet (github.com); overlapping topics (agent, sandbox).
Shared entity: Approval / Same source domain / Shared topic / Earlier coverage
Both cover Approval; reported by the same outlet (github.com); overlapping topics (agent, approval).
Shared entity: August / Same source domain / Shared topic / Earlier coverage
Both cover August; reported by the same outlet (github.com); overlapping topics (agent, audit).
Shared entity: Plus / Shared topic / What happened next / Tension
Both cover Plus; overlapping topics (against, agent); picks up the Plus thread on 2026-08-04.
Same source domain / Shared topic / Tension
Reported by the same outlet (github.com); overlapping topics (against, agent, argument, audit); pushes against this story (against).
Reported by the same outlet (github.com); overlapping topics (against, agent, audit, tool); pushes against this story (against).
Reported by the same outlet (github.com); overlapping topics (action, against, agent, audit); pushes against this story (against).