Finding / agent-zero

2026-09-21-agent-zero-the-ready-branch-carries-secret-substitution-and-browser-cross-chat-fixes-that-are-in-no

The ready branch carries secret-substitution and browser cross-chat fixes that are in no tag. Nothing an operator installs from a tag. The Docker ready image tag exists, but it was pushed 2026-09-09T12:42Z, before these commits.

Channel: branch-only (ready; compare/v2.12…ready ahead 76, behind 0; main is identical to v2.12). Half: defect. Date: 2026-09-12 through 2026-09-21 (in-window commits only).

Operator consequence: On v2.12, do not rely on secret placeholders nested inside parallel tool-call arguments being unmasked correctly. Watch for v2.13 and check for aa8e1c042a in compare/aa8e1c042a...v2.13.

Receipt

Finding metadata

Run: 2026-09-21-weekly-digest-2026-08-20_2026-09-21-frontier-v0

Finding ID: 2026-09-21-agent-zero-the-ready-branch-carries-secret-substitution-and-browser-cross-chat-fixes-that-are-in-no

Profile citations

Source links

Primary links, including exact changelog lines when available.