Evidence record / openhands

A dated record of one change, kept so the writing that cites it can be checked. Compiled from the sources listed below by the research run, not written for reading. The judgment lives in the issues that cite it, below.

2026-10-13-openhands-capacity-enforcement-and-optional-storage-policies-change-unattended-docker-runs

Capacity enforcement and optional storage policies change unattended Docker runs. Concurrent creation/run capacity is now enforced across async and synchronous paths with HTTP 429; the numeric default remains 10. The event route warns that a message may already be saved when starting its run returns 429, so retry /run rather than resending. Docker idle eviction reaches SDK v1.49.5; the normal idle TTL remains 20 minutes and is not the same as storage archival. In v1.54.0, optional disk-budget reclamation sheds selected gitignored directories of stopped managed workspaces, and optional retention deletes managed runtime state while preserving readable history and preventing resume. Both storage settings default None/off. Configured analyzers now emit SecurityAnalysisEvent even under NeverConfirm; an event does not make approval mandatory.

Channel: tagged-release. Half: both. Date: 2026-09-23 (SDK v1.49.5); 2026-09-30 (v1.50.1); 2026-10-09 (v1.54.0).

Operator consequence: Handle 429 with backoff and the correct run retry, not duplicated input. Set storage retention only if loss of resume is acceptable, and inspect the tagged policy before enabling it. A paused provider may apply retention immediately on resume. Use security events for review evidence while checking the separate confirmation policy; there is no measured attention saving here.

Receipt

Finding metadata

Run: 2026-10-13-profile-refresh-2026-09-21_2026-10-13-frontier-v0

Finding ID: 2026-10-13-openhands-capacity-enforcement-and-optional-storage-policies-change-unattended-docker-runs

Profile citations

  • OpenHands / claim / run-capacity-storage-and-security-events

Source links

Primary links, including exact changelog lines when available.

Versioned source: run artifact