Fetching from the wire…
01
02
03
04
05
06
07
08
OSS2026-09-24 · source-backed
Released September 24 against 82,938 stars. Adds enterprise auth, an out-of-tree extension system, conversation branching and projects in the workspace. Breaking: every Gateway response now carries an unconditional X-Trace-Id header, /mnt/skills is reserved for managed skill projections, and sandbox.replicas is now a hard E2B capacity cap that can fail an agent turn (GitHub). That last one will bite someone in production. Read the breaking-changes list before upgrading.
Each link below shares sources, entities, or timing with this story.
Firecracker + CoW mmap forking spawns KVM-isolated sandboxes in 0.79ms p50 with 265KB memory per instance — versus E2B's ~150ms and ~128MB. At this scale, sandboxed code execution becomes viable inside interactive agent loops where latency directly impacts UX. GitHub ---
Released September 1, leading its notes with cosign verification for ghcr.io/berriai/litellm, recommending verification against the public key at pinned commit 0112e53 because a commit hash is cryptographically immutable, with tag-based verification offered as the weaker optio...
Each project gets a throwaway VM where the agent has full tool access to Docker, git, compilers and package managers with no path back to the host (GitHub). coop setup installs Firecracker and a guest kernel on Linux; macOS goes through Lima via Homebrew. Usage is coop up then...
Released yesterday, one day after 0.21.0, v0.21.1 adds model call timeouts, run-scoped sandbox working directories, network-disabled Docker sandboxes and Modal sandbox resource options (GitHub). It also fixes the core honoring exact call-approval decisions and rejecting partia...
The TypeScript framework added a v1 ToolProvider runtime for managing OAuth-backed connections, @mastra/mysql as a first-class storage backend, and a VercelMicroVMSandbox built on ephemeral Firecracker microVMs (GitHub). The MicroVM sandbox is the standout. Per-session isolate...
Alibaba OpenSandbox (6.3K stars) — Isolated execution environments for AI agents. Docker, K8s, gVisor, Firecracker. The missing infrastructure for safely executing agent-generated code. GitHub Agency-Agents (6.1K stars, +1,469 today) — 55+ specialized agent personalities acros...
MindPattern daily
One email a day at 7 AM. Sources and a take on every story. Unsubscribe anytime.