What's Changed
- feat(secure-exec): add createVm, host function globals, docs, and sidecar-owned permission defaults by @NathanFlurry in https://github.com/rivet-dev/agentos/pull/1987
- test: prove guest listeners stay VM-local by @NathanFlurry in https://github.com/rivet-dev/agentos/pull/1998
- fix: deny default provider egress by @NathanFlurry in https://github.com/rivet-dev/agentos/pull/1997
- fix: allow VM-local networking by default by @NathanFlurry in https://github.com/rivet-dev/agentos/pull/1999
- fix: keep all guest listeners VM-local by @NathanFlurry in https://github.com/rivet-dev/agentos/pull/2001
- docs: define default VM isolation boundary by @NathanFlurry in https://github.com/rivet-dev/agentos/pull/2002
- fix: separate runtime bootstrap from guest subprocess policy by @NathanFlurry in https://github.com/rivet-dev/agentos/pull/2000
- refactor(agentos): rename bindings to host functions by @NathanFlurry in https://github.com/rivet-dev/agentos/pull/1996
- docs(secure-exec): finish the host functions rename by @NathanFlurry in https://github.com/rivet-dev/agentos/pull/2003
- refactor(agentos): drop the host function wrappers, names, and descriptions by @NathanFlurry in https://github.com/rivet-dev/agentos/pull/2006
- fix: restore clippy and rustfmt on main, restructure secure-exec docs by @NathanFlurry in https://github.com/rivet-dev/agentos/pull/2004
Full Changelog: https://github.com/rivet-dev/agentos/compare/v0.2.20...v0.2.21
