release: rework v2026.427.0 highlights ordering

- Pull Environments + sandbox providers into a new "Beta Features" section
- Move security agent role into Improvements
- Reorder remaining highlights for readability

Co-Authored-By: Paperclip <noreply@paperclip.ing>

releases/v2026.427.0.md

@@ -5,13 +5,15 @@
 ## Highlights
 
 - **Multi-user access and invite flows** — Paperclip can now run as a shared, authenticated control plane. Real human identities, company memberships, invite creation/landing, onboarding, profile settings, and company-scoped access controls are first-class while keeping the local-first single-operator path intact. ([#3784](https://github.com/paperclipai/paperclip/pull/3784))
-- **First-class issue references** — Mentions of `PAP-123`-style ticket ids in issue text, comments, and documents now persist as durable reference relationships. The board surfaces backlinks, queryable cross-issue context, and an idempotent backfill for existing content. ([#4214](https://github.com/paperclipai/paperclip/pull/4214))
 - **Structured issue-thread interactions** — Agents can now post structured proposals into the thread: suggested tasks, multi-question forms, and request-for-confirmation cards. The board renders them as interactive cards with accept/reject/answer flows, idempotency keys, and resumable agent continuations. Plan approvals and yes/no decisions are now explicit, auditable, and replayable without leaving the issue. ([#4244](https://github.com/paperclipai/paperclip/pull/4244), [#4381](https://github.com/paperclipai/paperclip/pull/4381))
-- **Environments and pluggable sandbox providers** — Heartbeat runs now execute against a first-class `Environment` record with lease lifecycle tracking. Local, SSH-backed remote, and sandboxed execution targets are all supported, and providers are pluggable via a generic plugin contract. The new `@paperclipai/plugin-e2b` package ships as the reference third-party sandbox provider. ([#4297](https://github.com/paperclipai/paperclip/pull/4297), [#4358](https://github.com/paperclipai/paperclip/pull/4358), [#4415](https://github.com/paperclipai/paperclip/pull/4415), [#4449](https://github.com/paperclipai/paperclip/pull/4449), [#4452](https://github.com/paperclipai/paperclip/pull/4452))
-- **Issue subtree pause, cancel, and restore** — Board operators can now hold, cancel, or restore a whole issue subtree from the issue detail. Holds are durable, dependency-aware, and keep descendant execution and wake behavior coherent. ([#4332](https://github.com/paperclipai/paperclip/pull/4332))
 - **Run liveness continuations and runtime lifecycle recovery** — Heartbeat runs now record liveness state, next-action hints, and continuation attempts so long or interrupted work can resume with full context. A new active-run watchdog plus runtime lifecycle recovery surfaces silent runs, covered-blocker chains, and stalled in-review leaves with operator-visible recovery decisions. ([#4083](https://github.com/paperclipai/paperclip/pull/4083), [#4419](https://github.com/paperclipai/paperclip/pull/4419), [#4209](https://github.com/paperclipai/paperclip/pull/4209))
 - **Sub-issues as a workflow checklist** — Ordered sub-issues now render as a dependency-aware progress checklist with current-step affordances, blocker context, and de-emphasized done items, replacing the flat table presentation. ([#4523](https://github.com/paperclipai/paperclip/pull/4523), [#4588](https://github.com/paperclipai/paperclip/pull/4588))
-- **First-class security agent role** — Added a dedicated `security` agent role to the taxonomy with route coverage and regression tests so security responsibilities can be modeled explicitly in the org chart. ([#4532](https://github.com/paperclipai/paperclip/pull/4532), [#4586](https://github.com/paperclipai/paperclip/pull/4586), [#4589](https://github.com/paperclipai/paperclip/pull/4589))
+- **Issue subtree pause, cancel, and restore** — Board operators can now hold, cancel, or restore a whole issue subtree from the issue detail. Holds are durable, dependency-aware, and keep descendant execution and wake behavior coherent. ([#4332](https://github.com/paperclipai/paperclip/pull/4332))
+- **First-class issue references** — Mentions of `PAP-123`-style ticket ids in issue text, comments, and documents now persist as durable reference relationships. The board surfaces backlinks, queryable cross-issue context, and an idempotent backfill for existing content. ([#4214](https://github.com/paperclipai/paperclip/pull/4214))
+
+## Beta Features
+
+- **BETA Environments and pluggable sandbox providers** — Heartbeat runs now execute against a first-class `Environment` record with lease lifecycle tracking. Local, SSH-backed remote, and sandboxed execution targets are all supported, and providers are pluggable via a generic plugin contract. The new `@paperclipai/plugin-e2b` package ships as the reference third-party sandbox provider. ([#4297](https://github.com/paperclipai/paperclip/pull/4297), [#4358](https://github.com/paperclipai/paperclip/pull/4358), [#4415](https://github.com/paperclipai/paperclip/pull/4415), [#4449](https://github.com/paperclipai/paperclip/pull/4449), [#4452](https://github.com/paperclipai/paperclip/pull/4452))
 
 ## Improvements
 
@@ -37,6 +39,7 @@
 - **README architecture systems** — New README documentation walking through the major systems in the codebase. ([#4250](https://github.com/paperclipai/paperclip/pull/4250))
 - **AWS ECS Fargate deployment runbook** — End-to-end deployment guide for running Paperclip on ECS Fargate. ([#3897](https://github.com/paperclipai/paperclip/pull/3897), @neerazz)
 - **Structured agent mentions in paperclip skill** — Skill comments now use structured `[@Name](agent://id)` mentions instead of raw `@Name` strings. ([#4103](https://github.com/paperclipai/paperclip/pull/4103), @aronprins)
+- **First-class security agent role** — Added a dedicated `security` agent role to the taxonomy with route coverage and regression tests so security responsibilities can be modeled explicitly in the org chart. ([#4532](https://github.com/paperclipai/paperclip/pull/4532), [#4586](https://github.com/paperclipai/paperclip/pull/4586), [#4589](https://github.com/paperclipai/paperclip/pull/4589))
 
 ## Fixes