HyperFrames v0.9.51

Released on 2026-11-15.

Render services can name extra networks their renders must treat as non-public, and mapped or NAT64 addresses are judged by the IPv4 address they carry. Website capture keeps Chrome's sandbox where the host supports it, and helper programs start only from trusted folders.

Features

• Engine: Operators can add networks the render must treat as non-public (b54f2079e, #7790).

Fixes

• Engine: Judge mapped and NAT64 addresses by the IPv4 they carry; producer exports the rule (54e4a2be3, #7789).
• Docs image upload publishes only regular files, and CI rejects new symlinks (9320c44e1, #7776).
• CLI and Studio server: Received-file guard covers subfolders and spellings; playlists named as media never reach ffmpeg (870b1fa4d, #7771).
• CLI: Keep Chrome's sandbox on for website capture where the host supports it (27b195feb, #7774).
• CLI: Keep captured page text out of generated agent instruction files (e4e93d6ed, #7772).
• Engine: Start nvidia-smi, vm_stat, ps and tasklist from trusted folders only (e3ff9c803, #7788).
• Producer: Every video's size samples share one grid (1d83e2520, #7782).

Full changelog

v0.9.50...v0.9.51