diff options
| author | tanaka takashi <isazaka@gmail.com> | 2026-08-14 18:00:29 +0900 |
|---|---|---|
| committer | tanaka takashi <isazaka@gmail.com> | 2026-08-14 18:00:29 +0900 |
| commit | a8233adff75a4726015c7c96ce5e864d4506f6b2 (patch) | |
| tree | 8ce06e1bc5d605b9681259260c99a47921e65413 /CHANGELOG.md | |
| parent | e07183ee6d3e57da325213e898cdcd6687320f53 (diff) | |
Unify the public product name and repository identifier while preserving stable executable, store, AppContainer, namespace, pipe, and mutex identifiers.
Make Directory.Build.props VersionPrefix the application-version source of truth, use SDK-generated assembly metadata, and compare helper compatibility by parsed major/minor/build release identity.
Rebuild the fixed winagent-sandbox-mcp release staging directory from clean defaults, emit versioned ZIP/checksum assets, verify manifests and fresh extraction, and reject local configuration, user state, and test artifacts.
Document release/deployment separation and upgrade responsibilities, add the initial changelog, update operational script paths, and record the v0.1.0 verification results.
Diffstat (limited to 'CHANGELOG.md')
| -rw-r--r-- | CHANGELOG.md | 24 |
1 files changed, 24 insertions, 0 deletions
diff --git a/CHANGELOG.md b/CHANGELOG.md new file mode 100644 index 0000000..9685333 --- /dev/null +++ b/CHANGELOG.md @@ -0,0 +1,24 @@ +# Changelog + +All notable changes to WinAgent Sandbox MCP are recorded in this file. + +## Unreleased + +## 0.1.0 — 2026-08-14 + +### Added + +- MCP `agent_run` and `agent_status` tools over stdio and Streamable HTTP. +- Ollama-backed planning, execution, replanning, context management, and localized Japanese/English results. +- YAML-defined workspaces, mounts, approved entry executables, network access, and resource limits. +- Applied Configuration snapshots with resolved paths and executable identities. +- Release Bundle generation for Windows 11 x64 as a self-contained .NET application. + +### Security + +- LPAC identities, NTFS ACLs, Job Objects, and WFP enforcement for the sandbox process tree. +- Entry executable approval while allowing descendants to inherit the same effective sandbox policy. +- A normally privileged `asInvoker` MCP server with task-scoped UAC elevation limited to WFP and loopback operations. +- Versioned, authenticated named-pipe IPC to the fixed `requireAdministrator` helper. +- Transactional ACL and network cleanup with startup recovery and audit correlation. + |