DottaandPaperclip 704fa7145f Require explicit candidate credential bindings at the ACPX sidecar ...

Mint credential-name metadata only from the selected task environment and bind it to the provider and normalized session. Carry that marker through the closed Rust environment boundary and reject raw sidecar credentials without a matching binding before runtime admission. Do not forward the marker to the provider or change legacy profiles.

Co-Authored-By: Paperclip <noreply@paperclip.ing>

2026-09-28 12:59:27 -05:00

..

adapter-utils

Fix overlay error fixtures on aliased temporary roots

2026-09-28 12:48:57 -05:00

adapters

fix(adapters): expose a verified provider stop before workspace restoration (#14311)

2026-09-28 08:45:53 -05:00

db

fix(runtime): finalize and recover sandbox workspace exports safely (#14402)

2026-09-28 10:57:32 -05:00

google-sheets-mcp-server

…

kv-demo-mcp-server

…

mcp-server

…

paperclip-eval-kernel

…

paperclip-runner

Require explicit candidate credential bindings at the ACPX sidecar

2026-09-28 12:59:27 -05:00

plugins

fix(runtime): finalize and recover sandbox workspace exports safely (#14402)

2026-09-28 10:57:32 -05:00

shared

Merge current master and validate negotiated ACP capability envelopes

2026-09-28 12:07:57 -05:00

skills-catalog

…

tailscale-https-broker

…

teams-catalog

…