What's Changed
- fix(adapters): type SDK tool calls from tool + arguments; guard unwrapped framework surfaces by @Ar9av in #854
- hooks: subagent spawns for codex/qwen, and four smaller mapping fixes by @Ar9av in #853
- feat(runtime): report each tool's event type; apply console 'classify as' overrides by @Ar9av in #855
- docs: event types, Unclassified, and correcting a tool's type by @Ar9av in #856
- fix(runtime): report the pre-correction type; narrowest classify scope wins by @Ar9av in #858
- feat(runtime): agent connections — enforce which agent may hand work to which by @Ar9av in #857
- Agent connections: fix review findings from #857 by @Ar9av in #859
- fix(eval-server, judge): per-caller sessions, no per-request transcript, CLI judge only where it fits by @Ar9av in #860
- fix(agent-connections): second review — name clashes, CLI parsing, A2A receiver and proxy by @Ar9av in #861
- fix(agent-connections): see LangGraph handoffs to an agent served over MCP by @Ar9av in #862
- feat: add per-identity sliding-window rate limiting (#271) by @Madhumasa84 in #851
- feat: Sentinel/Elastic/S3 sinks, prismor traces, agent table, release provenance by @Ar9av in #863
- perf(hooks): cut fixed per-call work on the hook-dispatch path by @Ar9av in #864
- fix: field-test gaps — one finding per call, hook-drift alerts, recommended asks, loop-variable instruction writes by @Ar9av in #865
- fix(runtime): re-cloak post-tool commands before evasion/staged detectors (#808) by @Ar9av in #810
- fix(scan): scan and fingerprint a skill's companion files, flag substituted bytecode by @Ar9av in #866
- fix(mcp-gateway): don't follow redirects on credentialed requests by @Ar9av in #791
- ci: mark the bytecode-compare marshal.loads as reviewed (bandit B302) by @Ar9av in #868
- Say who started each turn and link resumed sessions in the trail by @Ar9av in #867
- Close agent-bypass paths: fail-closed hook, pause floor, interpreter tampering, decode matching by @Ar9av in #869
- fix(proxy): screen Bedrock streams, thinking deltas and multi-choice chunks by @Ar9av in #870
- fix(proxy): A2A stream regression from #870, n>1 choices, Bedrock signing by @Ar9av in #871
Full Changelog: v1.72.5...v1.73.0