October 8, 2026

← All updates

File and folder uploads in Web Chat

7 new6 improved8 fixed

You can now attach local files, folders, and pasted images directly in Web Chat.

New

• File and folder uploads in Web Chat. You can now attach local files, folders, and pasted images to Web Chat messages; uploads land in the runtime workspace so the agent can reference them directly.
• Natural-language severity policy for AI red-teaming. generate_attack now accepts a severity_policy parameter so you can define custom risk taxonomies — thresholds, matrices, and aliases — that the agent applies when classifying findings. Per-assessment overrides and broader agentic attack category coverage are also included.
• Worker sessions on eval sample detail. The eval sample detail page now lists worker sessions the agent started for that attempt, with links to each session in Agent Sessions.
• Jump from session media to its tool call. Artifacts logged by a tool call in the Media tab now have a “View in transcript” button that opens the Transcript tab scrolled and focused to that exact call, and the spot is linkable via ?tool_call=<id>.
• Session Memories tab. Sessions now have a Memories tab showing every memory the session created, updated, closed, or reopened, with links to the full memory detail view.
• Binary-analysis structured output. The binary-analysis capability now emits structured findings and assets — recovered keys, vulnerability root causes, malicious capabilities, extracted payloads, and embedded endpoints — trackable and filterable through the platform’s review-and-submit workflow.
• Share Chat sessions to your workspace. Chat’s session menus now include a Share action so you can make a private session visible to your workspace team without leaving Chat.

Improvements

• Workflow run progress on the graph. Workflow run graphs now show step-level progress at a glance: edges and cards are color-coded by status (running, succeeded, failed, not taken), with motion on active paths.
• Token and cost totals in the eval header. The evaluation detail header now shows total token usage and model cost for the full run, updating live while the evaluation is in progress.
• Capability versions and updates in Web Chat. The Web Chat capabilities picker now shows the installed version of each capability and offers an inline update when a newer version is available.
• Filter project memories by session. You can now filter project memories by session ID via the API, SDK tool, and ApiClient.list_project_memories, letting agents trace which memories a given session created, updated, or closed.
• AI red-teaming severity scoring improvements. Empty model responses are now correctly scored as 0.0, agentic attack categories have broader severity mapping coverage, and per-assessment severity policies with custom thresholds and category-to-severity overrides are supported.
• Optional web-security tools no longer block sandbox provisioning. Optional tools (Caido, Burp, exiftool, and others) no longer cause health errors or block provisioning when absent in sealed or offline deployments.

Fixes

• Hosted Tinker training unblocked. Hosted dn train sft / dn train rl jobs were failing at start with “Your Tinker SDK version is no longer supported”; the training image now uses a supported client version and the model catalog reflects current Tinker offerings (Qwen3-8B, Nemotron 3 Nano/Super/Ultra).
• Worlds agent-mode trajectories and dead-backend errors. Agent-mode trajectories no longer fail immediately with a silent import error, and dead-backend sandboxes now return a clear message to create a new manifest instead of a raw 502. Greedy sampling no longer OOM-kills the backend server, and agent errors now include the full traceback.
• Hosted optimization startup failures reported immediately. Hosted optimization jobs that fail during startup now report the real error within seconds instead of hanging for an hour before timing out.
• Org-qualified task refs resolve correctly. Refs like org/name@version in --task now resolve instead of returning 404.
• E2B sandbox tool PATH. Tools installed by capabilities in E2B sandboxes (such as uv and Go tools) are now found on PATH when an agent tries to use them; a new optional dependencies.path field in capability.yaml lets capabilities declare additional tool directories.
• Agent-mode trajectory jobs fail fast when no model is configured. Jobs now return a clear 400 error at creation time when the selected agent has no model, instead of failing ~12 seconds in with an opaque message.
• Self-hosted first-user setup. On self-hosted installs, the first user to sign up now goes through /setup to set their name, so the home page and default workspace no longer show a randomly generated username.
• Evaluation task ref 404 fixed. Org-qualified --task references now resolve correctly in evaluations.