AgentConnection seam (packages/agent/src/types.ts); InteractiveModeLocalSessionHost deletion (docs/adr/0001-kill-interactivemode-localsessionhost.md); web workspace isolation (web/ as pnpm workspace, never merging upstream); local-first web posture (127.0.0.1 binding, no multi-user auth); protocol v8 (seedMessages, capability gates); openui chart sanitization (sanitizeChartColor, sanitizeChartToken); release pipeline removal (implementation/remove-release-ci); sandbox extension (packages/coding-agent/examples/extensions/sandbox/index.ts) as optional OS-level isolation.
Related: Background index, Security