Evidence record / openhands
A dated record of one change, kept so the writing that cites it can be checked. Compiled from the sources listed below by the research run, not written for reading. The judgment lives in the issues that cite it, below.
2026-10-13-openhands-delegated-agents-inherit-profile-tool-and-mcp-limits-from-sdk-v1-51
Delegated agents inherit profile tool and MCP limits from SDK v1.51.0. A profile restricted to selected tools or MCP servers could delegate to a child with more authority. The resolver now supplies SubAgentScope to delegation tools; offered definitions are filtered, the built child is checked, constraints propagate through nested task/workflow delegation, and uncheckable agent kinds are rejected when constrained. This is an authority repair in released source, separate from secret filtering and the local-terminal key alias.
Channel: tagged-release. Half: defect. Date: 2026-10-03 (SDK v1.51.0); 2026-10-06 (Canvas v1.25.0 bundle).
Operator consequence: Upgrade a server that delegates constrained profiles to SDK/agent-server 1.51.0 or later; Canvas first includes the fix at v1.25.0. Expect incompatible children to disappear or fail instead of silently gaining authority. A live test should attempt an extra-tool child, an extra-MCP child and nested delegation; do not infer secret containment from this tool/MCP repair.
Receipt
- https://github.com/OpenHands/software-agent-sdk/commit/9b66ae79c39751fdaf637de8852461467a518b45
- https://github.com/OpenHands/software-agent-sdk/compare/v1.50.1…v1.51.0
- https://github.com/OpenHands/software-agent-sdk/releases/tag/v1.51.0
- https://github.com/OpenHands/OpenHands/blob/v1.25.0/config/defaults.json
Finding metadata
Run: 2026-10-13-profile-refresh-2026-09-21_2026-10-13-frontier-v0
Finding ID: 2026-10-13-openhands-delegated-agents-inherit-profile-tool-and-mcp-limits-from-sdk-v1-51
Source links
Primary links, including exact changelog lines when available.
- commit2026-10-13-openhands-delegated-agents-inherit-profile-tool-and-mcp-limits-from-sdk-v1-51github.com/OpenHands/software-agent-sdk/commit/9b66ae79c39751fdaf637de8852461467a518b45git compare2026-10-13-openhands-delegated-agents-inherit-profile-tool-and-mcp-limits-from-sdk-v1-51github.com/OpenHands/software-agent-sdk/compare/v1.50.1...v1.51.0github release2026-10-13-openhands-delegated-agents-inherit-profile-tool-and-mcp-limits-from-sdk-v1-51OpenHands/software-agent-sdk / v1.51.0tagged commit file2026-10-13-openhands-delegated-agents-inherit-profile-tool-and-mcp-limits-from-sdk-v1-51OpenHands/OpenHands / config/defaults.json
Versioned source: run artifact