Issues

• [BUG] A Linux tool cannot start a program by a name that is a symbolic link

  Area - Tool Containment (Binaries/Local MCP)bug
  Bug

  strands-agents/box#207 · Filter by author abhisheksp opened on Oct 28, 2026

• [FEATURE] Provide an opt-in denylist setup for network, shell, and MCP workflows

  strands-agents/box#177 · Filter by author radhikasig opened on Oct 26, 2026

• [FEATURE] Reuse HTTP connections across permitted egress requests

  strands-agents/box#176 · Filter by author radhikasig opened on Oct 26, 2026

• [FEATURE] Expose one credential placeholder under multiple environment variable names

  strands-agents/box#175 · Filter by author radhikasig opened on Oct 26, 2026

• [FEATURE] Support long-running shell workflows beyond the fixed 30-second timeout

  strands-agents/box#174 · Filter by author radhikasig opened on Oct 26, 2026

• [FEATURE] Extend gateway compatibility for HTTP/2, WebSockets, and compressed credentialed responses

  strands-agents/box#173 · Filter by author radhikasig opened on Oct 26, 2026

• [FEATURE] Support egress uploads larger than 16 MiB

  strands-agents/box#172 · Filter by author radhikasig opened on Oct 26, 2026

• [FEATURE] Stream egress responses and support downloads larger than 16 MiB

  strands-agents/box#171 · Filter by author radhikasig opened on Oct 26, 2026

• [FEATURE] Support arbitrary executables to provide credentials

  strands-agents/box#170 · Filter by author notowen333 opened on Oct 26, 2026

• [FEATURE] Add native filesystem policy interception on Linux (P0)

  linuxP0
  strands-agents/box#127 · Filter by author kevin-orellana opened on Oct 20, 2026
  2

  

• ci: automate signed native filesystem tests and restore required validation

  strands-agents/box#125 · Filter by author kevin-orellana opened on Oct 20, 2026

• [BUG] Shell alias drops stdin, so a hook rewritten to zsh -c gets no payload

  strands-agents/box#120 · Filter by author ridhimrastogi opened on Oct 19, 2026
  1

• test(box): validate native filesystem failure behavior before standard release

  strands-agents/box#117 · Filter by author kevin-orellana opened on Oct 16, 2026

• [FEATURE] Per-tool credential scoping: attribute egress-gateway requests to the originating process

  strands-agents/box#115 · Filter by author sakibha94 opened on Oct 15, 2026

• [FEATURE] Does Strands Box support agents built with LangGraph?

  strands-agents/box#106 · Filter by author sambit19 opened on Oct 13, 2026

• [FEATURE] Consider Sandlock as an alternative Linux containment backend

  linuxP1
  strands-agents/box#105 · Filter by author congwang-mk opened on Oct 12, 2026

• [DOCS] Should the egress guide document the existing credsd source?

  strands-agents/box#104 · Filter by author ikenyal opened on Oct 12, 2026

• [FEATURE] Egress gateway: support additional upstream trust roots for networks with TLS interception

  strands-agents/box#54 · Filter by author annymsMthd opened on Oct 9, 2026

• Spike: IPv6 sockets inside a Linux box

  Area - Egress/Credsbox-corelinuxP1planned
  strands-agents/box#52 · Filter by author abhisheksp opened on Oct 9, 2026

• Linux: scope the seccomp table on TIOCSTI, set-id chmod and open_tree_attr, and pin the bind set (P0)

  Area - Agent Containmentbox-coreenhancementlinuxP0planned
  strands-agents/box#51 · Filter by author abhisheksp opened on Oct 9, 2026
  1

  

• Epic: Linux — docs

  Area - Releasebox-coredocumentationenhancementlinuxplanned
  strands-agents/box#50 · Filter by author abhisheksp opened on Oct 9, 2026

• Linux: publish the aarch64 tarball built against glibc 2.34 and let download.sh install it

  Area - Releasebox-coreenhancementlinuxplanned
  strands-agents/box#49 · Filter by author abhisheksp opened on Oct 9, 2026

• Epic: Linux — test infrastructure (P0)

  Area - Releasebox-coreenhancementlinuxP0planned
  strands-agents/box#48 · Filter by author abhisheksp opened on Oct 9, 2026
  2

  

• Decide: Linux native egress (contain_egress = false) stays a documented host-network grant, or gets its own namespace with a link-local deny

  Area - Egress/Credsbox-coreenhancementlinuxplanned
  strands-agents/box#47 · Filter by author abhisheksp opened on Oct 9, 2026

• Epic: Linux — kernel, distribution and environment matrix

  Area - Agent Containmentbox-coreenhancementlinuxplanned
  strands-agents/box#46 · Filter by author abhisheksp opened on Oct 9, 2026