v1.1.0

1.1.0 (2026-06-25)

Features

• console: Phase B1 hero views (instrument cockpit + live fork tree) (#348) (602a81b)
• sdk-go: Kubernetes cluster mode (AgentRun) (#303) (39ef093)
• sdk-go: Kubernetes cluster mode (AgentRun) (#303) (fdae520)
• sdk-java: Kubernetes cluster mode (AgentRun) (#306) (5b36419)
• sdk-java: Kubernetes cluster mode (AgentRun) (#306) (52fd768)
• sdk-ruby: Kubernetes cluster mode (AgentRun) (#304) (4a121ab)
• sdk-ruby: Kubernetes cluster mode (AgentRun) (#304) (114ee1d)
• sdk-rust: Kubernetes cluster mode (AgentRun) (#305) (12cfe82)
• sdk-rust: Kubernetes cluster mode (AgentRun) (#305) (4682f7d)

v1.0.0

1.0.0 (2026-06-24)

Features

• agent-rs: add error.rs and env.rs shared primitives (#310) (8022bd8)
• agent-rs: add sys/ module: AF_VSOCK, RNDADDENTROPY, clock_settime wrappers (#310) (10a0340)
• agent-rs: Archive and Upload RPC implementations (#310) (48499ca)
• agent-rs: clippy -D warnings clean, musl size gate, 3 hygiene fixes (#310) (244569e)
• agent-rs: Exec and PTY RPC implementation (#310) (945d90d)
• agent-rs: fork/clock - CLOCK_REALTIME step with 500ms threshold (#310) (4c9c5b8)
• agent-rs: fork/mod - handle_notify_forked orchestrator (#310) (4dc89e5)
• agent-rs: fork/network - eth0 reconfiguration via raw netlink (#310) (b17cadd)
• agent-rs: fork/reseed - credited CRNG reseed, fail-closed (#310) (7cb6ec7)
• agent-rs: fork/volumes - per-fork volume mounts (#310) (939174b)
• agent-rs: implement ExecStream gRPC RPC (production /init parity) (#310) (d64b1a8)
• agent-rs: init/ module and tonic gRPC skeleton over vsock (#310) (bcdb3a8)
• agent-rs: PortForward bidirectional TCP splice RPC (#310) (569ebae)
• agent-rs: production Rust guest agent, full sandbox.v1 gRPC parity (WIP, #310) (cb36e5c)
• agent-rs: ReadFile/WriteFile/List/Stat/Mkdir/Remove RPC implementations (#310) (b65d219)
• agent-rs: replace spike scaffolding with gRPC production toolchain (#310) (1ecd3cd)
• agent-rs: RunCode RPC + KernelManager driver subprocess (#310) (d9f907d)
• agent-rs: Vitals streaming RPC with /proc sampler (#310) (f14466b)
• agent-rs: Watch RPC with inotify event streaming (#310) (6b0477d)
• agent-rs: wire NotifyForked control service and final main (#310) (ab13eb0)
• api: consolidate to stable mitos.run/v1 (three nouns), remove v1alpha1 (#299) (30a0484)
• Connect runtime protocol (gRPC over vsock) + Python SDK (#24) (f1f04e4)
• console: Phase B0 dashboard shell (responsive, accessible) + console design spec (#332) (2111842)
• daemon: real vsockGuestConn over gRPC for Connect service (#24 stage 5) (c071e08)
• guest-agent-rs: implement Processes and Signal RPCs (task 2.5, #310) (292decb)
• guestgrpc: host-side gRPC guest client over vsock with ready-retry (#310) (f8f5c05)
• guest: implement ExecStream and RunCodeStream gRPC RPCs in the Go agent (#310) (f3d5e37)
• guest: implement reuse-able Sandbox gRPC RPCs in the guest agent (f3112d6)
• guest: implement Watch, Processes, Signal gRPC RPCs (Task 5.1c) (a278452)
• guest: serve gRPC Exec and Control over vsock alongside JSON loop (80a297c)
• host: migrate guest callers from JSON to gRPC (SP1.5, #310) (f8bbcfd)
• proto: add RunCode, Mkdir, Remove, Upload to sandbox.v1 (e873234)
• proto: internal control service (NotifyForked, Configure, Ping) (c240d73)
• rootfs,ci: make the Rust guest agent the production default; firecracker-test validates it (#310) (58b6f9b)
• rootfs,ci: make the Rust guest agent the production default; firecracker-test validates it (#310) (de66b03)
• sandbox: add ExecStream and RunCodeStream server-streaming RPCs (#24) (5530c26)
• sandboxrpc: file RPCs (ReadFile, WriteFile, List, Stat, Mkdir, Remove) (40e1af2)
• sandboxrpc: GuestConn port and Service.Guest field; Exec streams via a fake guest (5664ccc)
• sandboxrpc: implement Archive (download) and Upload (untar) RPCs (e30f26f)
• sandboxrpc: implement PortForward, Vitals, Watch, Processes, Signal RPCs (b278610)
• sandboxrpc: implement RunCode RPC (Task 2.3) (9fb4037)
• sandboxrpc: mount Connect handler on :9091 with bearer-token gate and GuestConn exec bridge (Task 3.2, issue #24) (200cd91)
• sandboxrpc: per-sandbox bearer token interceptor, fail-closed (ed4e35b)
• sdk: migrate direct-mode file transport to the Connect Sandbox service (#24) (887a617)
• sdk: ride exec and run_code on the Connect ExecStream/RunCodeStream RPCs (#24) (9f36f03)
• vsock: gRPC-over-net.Conn dialer spike (task 4.1) (c9cb54a)

Bug Fixes

• agent-rs: address review findings in per-fork netlink reconfiguration (#310) (548e4cc)
• agent-rs: address SP1 1.2 review findings in sys/ safety-critical module ([#310](https://github.com/mit...

mitos-0.4.1

Snapshot-fork sandboxes for AI agents on Kubernetes.

v0.14.0

0.14.0 (2026-06-23)

Features

• distribution to Artifact Hub, krew, OperatorHub, and Red Hat (1c65051)
• sdk: official Go SDK library (direct mode, hosted mitos.run) (#250) (#291) (6b02066)

Bug Fixes

• krew: rename plugin to mitos (kubectl mitos) (aac976a)
• krew: rename the plugin to mitos (kubectl mitos) (d5b45c3)

v0.13.0

0.13.0 (2026-06-23)

Features

• chart: console + gateway components, one chart for both editions (6a2e9f0)
• console: @mitos/brand package + capability-gated SPA (Phase B) (09e7850)
• console: billing provider abstraction (Stripe first, MoR-ready) (1d5359d)
• console: embed the SPA in cmd/console + capabilities-from-env + Dockerfile (095e4c6), closes #214
• console: GET /console/billing/portal (provider-neutral manage-subscription link) (ca3f85c)
• console: hosted/self-hosted dashboard — spec + Phase A backend seams (baca9a7)
• console: kube SecretStore provider (org-namespaced Secrets) (4d56aaa), closes #275
• console: mount the signature-verified billing webhook + portal wiring (a5f91cc)
• console: OpenBao/Vault SecretStore provider (per-org KV-v2 path scoping) (8dea216), closes #275
• console: org-scoped SandboxControl + hard-isolation tenant convention (#2) (#287) (586f7aa)
• console: phase 2 — billing portal, secret provider selection, billing webhook (0eb75f1)
• console: real go-oidc verifier + /auth login flow (caa8201), closes #214
• console: select the real secret backend in cmd/console (d156a7d)
• sdk: official Java SDK (direct mode, hosted mitos.run) (#250) (#290) (279da4f)
• sdk: official Rust SDK (direct mode, hosted mitos.run) (#250) (#280) (337d9b6)

Bug Fixes

• deps: bump go-jose to v4.1.4 (GO-2026-4945) (329ebd8)

mitos-0.4.0

Snapshot-fork sandboxes for AI agents on Kubernetes.

v0.12.0

0.12.0 (2026-06-22)

Features

• api-v2: Connect Sandbox service foundation with streaming Exec (#24) (#267) (691a016)
• auth: one login authenticates the SDKs, mcp, and CLI (#210-adjacent) (#278) (0ef2848)
• cli: first-class packaging, goreleaser + install.sh + OS-aware docs (#253) (#268) (5e7b3de)
• controller: fork-budget attenuation, depth-aggregate + never-widen (#25) (#266) (c73313b)
• sandbox-server: TCP-over-vsock guest port forwarding (#228) (#271) (d3408c9)
• sdk: official Ruby SDK (direct mode, hosted mitos.run) (#250) (#273) (3c0fabf)
• skill,sdk,mcp: Agent Skill + default agent surfaces to hosted mitos.run (#252) (#269) (182c537)

v0.11.0

0.11.0 (2026-06-22)

Features

• chart: deployable SandboxPool conversion webhook behind a gated value (#22) (#254) (4f3706e)
• sandbox-server: implement real-mode fork+exec via internal/fork.Engine (#22) (#257) (b7a9b85)

Bug Fixes

• ci: give the sdk-conformance mock server a distinct data-dir (#22) (#260) (63a91a6)
• sdk-ts: send Idempotency-Key on createTemplate and fork (#22) (#251) (7c33381)
• sdk: lazy-load kubernetes so direct mode needs only httpx (#22) (#258) (9efbd79)

v0.10.0

0.10.0 (2026-06-22)

Features

• fork: distinct guest MAC per fork; KVM-prove network identity; mark #3 row 4 done (#248) (788d872)

v0.9.0

0.9.0 (2026-06-22)

Features

• api-v2: idempotency keys on creating sandbox-server calls and SDK (3b3b80e)
• api-v2: in-guest self-service socket and mitos.guest SDK (e02646a)
• api: add v1alpha2 consolidated three-noun types and SandboxPool conversion (a9dfc3b)
• api: define sandbox.v1 runtime protocol contract and stubs (fb7865b)
• apierr: normative error-code catalogue, doc-sync, static remediation lint (#28) (bfc7c4a)
• bench: real claim-storm pinning measurement, off vs on (#168) (337b25c)
• captoken: attenuated capability-token core, budget API, exhaustion error (0354dd4)
• controller: consolidated v1alpha2 Sandbox reconciler over the existing engine (d79e323)
• controller: elide no-op claim status writes under churn (#163) (93151ae)
• controller: enforce capability fork budget on self-initiated forks (#25) (#234) (485c1a7)
• controller: wire v1alpha2 scheme, Sandbox reconciler, and pool conversion webhook (be9a9a2)
• cpupin: dynamic post-ready CPU pinning + launch scheduling priority (0ca4a8e)
• deploy: mitos doctor preflight + host/kernel prereq docs + deploy-layer errors (7ec9404)
• doctor: userfaultfd preflight check + host-prereq doc (#174, #167) (4a84e09)
• errors: typed discriminable error hierarchy and deterministic timeouts (#216) (b253dcf)
• fork: continuous virtio-rng device, jailer cap-list, KVM UUID/TLS/memory assertions (#3) (206725f)
• forkd: LLM-legible guest-kernel-missing error; close out #174 (#232) (c76ab26)
• fork: hugepage-backed guest memory build-time plumbing (#167) (7f51d47)
• fork: snapshot-resume prefetch design, hot-page manifest field, capture seam (#167) (9769d3e)
• fork: userfaultfd memory backend for hugepage restore + hot-page prefetch (#167) (5484f97)
• gc: reclaim orphan volume backings past OrphanGrace (#163) (bf0ba74)
• gc: typed OrphanReaped condition on a swept terminal claim (#163) (2bdb9b8)
• gpu: GPU-aware scheduling, larger sizes, GPU-seconds metering (#221) (d72140a)
• lifecycle: live set_timeout, work-aware idle, first-class pause/resume (bc0d1cb)
• metering: per-sandbox lifetime memory labels; mark #3 row 5 done (#244) (f72fa2c)
• network: first-class egress/ingress SDK and API knobs (#219) (29703c7)
• observability: Hubble/OpenCost attribution, distribution-lag metric (#164) (48ea8a0)
• observability: Layer 3 guest telemetry vsock bridge (#164) (de27713)
• observability: thread vitals labels through the Fork gRPC (#164) (2160ec5)
• paperclip: map sandbox-provider contract onto SandboxClaims (#20) (6665e6d)
• preview: per-sandbox preview URLs with signed expiring tokens and routing (#126) (a733397)
• saas: billing-grade usage pipeline + org-scoped usage API (#211) (06405f8)
• saas: customer accounts, orgs, scoped API keys, and public gateway (d6b1d1d)
• saas: org-scoped console BFF for the hosted web console (#214) (72731b6)
• saas: quota, rate-limit, egress-tier, and kill-switch abuse controls (#213) (b1f5484)
• saas: self-serve onboarding funnel core, gated waitlist vs open (#215) (17978aa)
• saas: Stripe metered billing core behind a fake client (#212) (0ee1eb6)
• scheduler: node isolation-tier floor + PVM evaluation (#40) (58934b4)
• sdk: add VibeKit and ZenML sandbox-backend adapters (#205) (1d42cec)
• sdk: E2B-compat shim mitos.e2b over the sandbox-server (a024943)
• sdk: flat API-key-authed one-liner native onboarding (#217) (ad2e0ba)
• sdk: LangChain sandbox backend (MitosSandbox) (9d9fe79)
• sdk: OpenAI Agents SDK + Claude Agent SDK sandbox adapters (#204) (165aa4b)
• templates: code-first declarative builder and cached builds (#220) (cfd13ba)

Bug Fixes

• api-v2: do not serve v1alpha2 SandboxPool without conversion webhook (1535e5a)
• billing: Drawdown replay reports the original credit split, not FromCredit:0 (#212) (#237) (5d62aae)
• billing: webhook returns 500 on internal error, 401 only on bad signature (#212) (#239) ([06d074c](https:/...