This release adds 2 notable features for engineering teams evaluating rollout.
✓ No known CVEs patched in this version
Topics
+10 more
Affected surfaces
Summary
AI summaryUpdates Bug Fixes, Code Refactoring, and 0.5.0 across a mixed release.
Changes in this release
| Type | Severity | Summary | CVE |
|---|---|---|---|
| Security | High |
lifecycle: validate owned Hopper process identity lifecycle: validate owned Hopper process identity Source: llm_adapter@2026-07-15 Confidence: high |
— |
| Security | High |
process: keep network approval fail-closed process: keep network approval fail-closed Source: llm_adapter@2026-07-15 Confidence: high |
— |
| Feature | Low |
analysis: harden agent workflows and evidence boundaries analysis: harden agent workflows and evidence boundaries Source: llm_adapter@2026-07-15 Confidence: high |
— |
| Feature | Low |
cli: align terminal workflows with MCP cli: align terminal workflows with MCP Source: llm_adapter@2026-07-15 Confidence: high |
— |
| Bugfix | Medium |
analysis: accept valid final dossier pages analysis: accept valid final dossier pages Source: llm_adapter@2026-07-15 Confidence: high |
— |
| Bugfix | Medium |
bridge: harden bounded Hopper boundaries bridge: harden bounded Hopper boundaries Source: llm_adapter@2026-07-15 Confidence: high |
— |
| Bugfix | Medium |
cli: preserve function provider provenance cli: preserve function provider provenance Source: llm_adapter@2026-07-15 Confidence: high |
— |
| Bugfix | Medium |
process: default capture networking to loopback process: default capture networking to loopback Source: llm_adapter@2026-07-15 Confidence: high |
— |
Full changelog
0.5.0 (2026-07-13)
Features
- analysis: harden agent workflows and evidence boundaries (883db91)
- cli: align terminal workflows with MCP (b1912b1)
Bug Fixes
- analysis: accept valid final dossier pages (7c36f36)
- bridge: harden bounded Hopper boundaries (f8e8ea3)
- cli: preserve function provider provenance (c630f41)
- lifecycle: validate owned Hopper process identity (898d6b0)
- process: default capture networking to loopback (bce3398)
- process: keep network approval fail-closed (9526389)
Code Refactoring
- cli: share direct analysis tool types (329fdf6)
Documentation
Tests
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About Rea
All releases →Related context
Related tools
Earlier breaking changes
- vrea-agents-2.0.0 mcp now requires Evidence for managed reconstruction.
- vrea-agents-1.0.0 contracts APIs now return structured discriminated output shapes
- vrea-agents-0.3.0 rename identity package and CLI to REA
- vrea-0.2.0 rename identity package and CLI to REA
Beta — feedback welcome: [email protected]