Back to news
VAF 0.1.0a18: the logs window opens on a protection overview
In 0.1.0a18, VAF re-scans installed skills and takes high-risk ones out of the agent's reach until an admin deletes or restores them.
0.1.0a18 is out. The logs window opens on eight protection modules, among them the audit chain, code sandbox and LAN firewall. The banner above them takes the worst state of all modules; where a measurement is missing, it reads "not measured" rather than green.
pip install -U --pre vafOne thing is new:
- A skill whose files change after installation no longer goes unnoticed. VAF re-scans installed skills every 5 hours; skills_rescan_interval_hours sets the interval, 0 disables the re-scan. A skill that re-scans as high-risk after install drops out of the skill list, tools and system prompt until an admin deletes it or restores it with their 2FA code.
Two bugs are fixed:
- The desktop window no longer ping-pongs between the dashboard and the login page. With an expired auth cookie and a still-valid token in browser storage, the server sent the window to the login page and the login page sent it back, until the interface froze. The cookie's lifetime now follows the token's expiry instead of a fixed 30 days.
- Non-admins now see and cancel only the sub-agent runs of their own sessions. Any authenticated user used to be able to list every running sub-agent, including other users' task text, and cancel it. The admin keeps the full view, attributed per user.
0.1.0a18 puts the protection overview in the logs window; how long security logs are kept is settled in 0.1.0a21, at 14 days.