# Changelog

All notable changes to WinAgent Sandbox MCP are recorded in this file.

## Unreleased

## 0.1.0 — 2026-08-14

### Added

- MCP `agent_run` and `agent_status` tools over stdio and Streamable HTTP.
- Ollama-backed planning, execution, replanning, context management, and localized Japanese/English results.
- YAML-defined workspaces, mounts, approved entry executables, network access, and resource limits.
- Applied Configuration snapshots with resolved paths and executable identities.
- Release Bundle generation for Windows 11 x64 as a self-contained .NET application.

### Security

- LPAC identities, NTFS ACLs, Job Objects, and WFP enforcement for the sandbox process tree.
- Entry executable approval while allowing descendants to inherit the same effective sandbox policy.
- A normally privileged `asInvoker` MCP server with task-scoped UAC elevation limited to WFP and loopback operations.
- Versioned, authenticated named-pipe IPC to the fixed `requireAdministrator` helper.
- Transactional ACL and network cleanup with startup recovery and audit correlation.