This release adds 3 notable features for engineering teams evaluating rollout.
✓ No known CVEs patched in this version
Topics
+6 more
ReleasePort's take
Light signalSandbox mode now executes mi inside a Docker container, mounting the current directory read-write and providing Node 22, Python 3.12, uv, and Unix tools for safe local experimentation.
Why it matters: Test sandbox workflows in dev before using; it runs with host‑network access and mounts PWD read‑write.
Summary
AI summarySandbox mode runs mi inside a Docker container mounting PWD read-write.
Changes in this release
| Type | Severity | Summary | CVE |
|---|---|---|---|
| Feature | Medium |
Sandbox mode runs mi inside Docker container for safe experimentation Sandbox mode runs mi inside Docker container for safe experimentation Source: llm_adapter@2026-05-21 Confidence: high |
— |
| Feature | Medium |
Sandbox mounts current directory read-write and config read-only Sandbox mounts current directory read-write and config read-only Source: llm_adapter@2026-05-21 Confidence: high |
— |
| Feature | Medium |
Sandbox uses host network mode for local API access Sandbox uses host network mode for local API access Source: llm_adapter@2026-05-21 Confidence: high |
— |
| Feature | Medium |
Sandbox image includes Node 22, Python 3.12, uv, Unix tools Sandbox image includes Node 22, Python 3.12, uv, Unix tools Source: llm_adapter@2026-05-21 Confidence: high |
— |
Full changelog
Sandbox mode — run mi inside a Docker container for safe experimentation.
mi --sandbox -p 'do something risky'
MI_SANDBOX=1 mi # always containerized
Mounts PWD read-write and ~/.mi/config.json read-only. Uses --network=host for local API access. 330MB hardened Alpine image with Node 22, Python 3.12, uv, and standard Unix toolkit.
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About Tiny agentic loop with Docker sandbox
All releases →Related context
Related tools
Earlier breaking changes
- v1.8.0 Goal tool's `check` parameter now a judge prompt, not bash command.
Beta — feedback welcome: [email protected]