August 20, 2026

Kubernetes Gateway API support for on-prem installs

5 new 3 improved 8 fixed

On-prem deployments gain Kubernetes Gateway API routing this week, alongside a new Caido TypeScript SDK skill, expanded web-security attack skills, bulk session freeze, and media previews in the output panel, with a cluster of reliability fixes across the TUI, sandbox provisioning, and AIRT findings.

New

Caido TypeScript SDK skill. A new caido-mode skill in the web-security capability exposes the full Caido TypeScript SDK, enabling Match & Replace rules, replay sessions, HTTPQL history search, findings management, and curl-through-Caido testing from within an agent.
Media previews in the output panel. The output panel now embeds image, audio, and video previews directly in agent outputs alongside existing field data.
Kubernetes Gateway API support for on-prem installs. On-prem deployments can now route traffic through Kubernetes Gateway API (HTTPRoute) instead of Ingress, enabling installations on Istio, Envoy Gateway, and Cilium stacks.
New web-security skills: SQLi-to-RCE, math-rendering injection, XS-Leak. SQL-injection-to-RCE escalation, MathJax/KaTeX macro injection, and an updated browser side-channel (ORB/XS-Leak via service-worker fetch proxy) are now available as web-security skills.
Bulk freeze for agent sessions. You can now select multiple agent sessions and freeze them in bulk from the Agent Sessions tab, with a confirmation dialog before any sessions are affected.

Improvements

Typed confirmation for session deletes. Bulk and single-row session deletes now require typing a DELETE-{count} challenge before the action is confirmed, guarding against accidental permanent deletion.
ATIF dataset and replay downloads in the Worlds UI. Download the complete ATIF dataset for a trajectory-generation job from Worlds → Jobs, or export the normalized replay payload as JSON from the Trajectories page.
Webhook.site API key support in the callback tool. The web-security callback tool now accepts a WEBHOOK_SITE_API_KEY environment variable so you can use a paid webhook.site account to avoid rate limits; anonymous and interactsh fallback behavior is unchanged.

Fixes

AIRT findings table on large projects. The findings table now loads correctly on projects with many assessments instead of showing “No findings match the current filters” due to a request timeout.
OpenSandbox provisioning errors. On-prem OpenSandbox provisioning now surfaces actionable errors for scheduling failures, image-pull authentication issues, and capacity constraints instead of timing out silently.
Sandbox command arguments preserved. Command arguments passed as a list are no longer flattened into a single string, fixing runtime token rotation in hosted and on-prem sandbox environments.
TUI no longer crashes on Rich markup in reasoning. The TUI handles bracketed text and Rich markup sequences in model reasoning output without crashing, including on dn --resume.
TUI console shortcut no longer crashes on Runtimes screen. Pressing F5 to open the console while on the Runtimes screen (or 9 other TUI screens) no longer terminates the app.
Multiple active runtimes per project. Starting more than one runtime in the same project no longer returns a 500 database error.
ScopeGuard sessions continue after denied tool calls. ScopeGuard sessions in local mode no longer terminate when a tool call is denied — denied calls are recorded with the judge’s reason and the agent continues running.
Orphaned users see a clear state instead of an error. Users with no active organization memberships now see a dedicated screen rather than hitting an error or blank page.