Finding / openhands

2026-10-13-openhands-capacity-enforcement-and-optional-storage-policies-change-unattended-docker-runs

Capacity enforcement and optional storage policies change unattended Docker runs. Concurrent creation/run capacity is now enforced across async and synchronous paths with HTTP 429; the numeric default remains 10. The event route warns that a message may already be saved when starting its run returns 429, so retry /run rather than resending. Docker idle eviction reaches SDK v1.49.5; the normal idle TTL remains 20 minutes and is not the same as storage archival. In v1.54.0, optional disk-budget reclamation sheds selected gitignored directories of stopped managed workspaces, and optional retention deletes managed runtime state while preserving readable history and preventing resume. Both storage settings default None/off. Configured analyzers now emit SecurityAnalysisEvent even under NeverConfirm; an event does not make approval mandatory.

Channel: tagged-release. Half: both. Date: 2026-09-23 (SDK v1.49.5); 2026-09-30 (v1.50.1); 2026-10-09 (v1.54.0).

Operator consequence: Handle 429 with backoff and the correct run retry, not duplicated input. Set storage retention only if loss of resume is acceptable, and inspect the tagged policy before enabling it. A paused provider may apply retention immediately on resume. Use security events for review evidence while checking the separate confirmation policy; there is no measured attention saving here.

Receipt

Finding metadata

Run: 2026-10-13-profile-refresh-2026-09-21_2026-10-13-frontier-v0

Finding ID: 2026-10-13-openhands-capacity-enforcement-and-optional-storage-policies-change-unattended-docker-runs

Profile citations

  • OpenHands / claim / run-capacity-storage-and-security-events

Source links

Primary links, including exact changelog lines when available.