blob: 96853332ff1af8cc1bd97e02b1db910cffc16157 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
|
# Changelog
All notable changes to WinAgent Sandbox MCP are recorded in this file.
## Unreleased
## 0.1.0 — 2026-08-14
### Added
- MCP `agent_run` and `agent_status` tools over stdio and Streamable HTTP.
- Ollama-backed planning, execution, replanning, context management, and localized Japanese/English results.
- YAML-defined workspaces, mounts, approved entry executables, network access, and resource limits.
- Applied Configuration snapshots with resolved paths and executable identities.
- Release Bundle generation for Windows 11 x64 as a self-contained .NET application.
### Security
- LPAC identities, NTFS ACLs, Job Objects, and WFP enforcement for the sandbox process tree.
- Entry executable approval while allowing descendants to inherit the same effective sandbox policy.
- A normally privileged `asInvoker` MCP server with task-scoped UAC elevation limited to WFP and loopback operations.
- Versioned, authenticated named-pipe IPC to the fixed `requireAdministrator` helper.
- Transactional ACL and network cleanup with startup recovery and audit correlation.
|
