OpenHands: The Open-Source Agent Platform Is Hardening Around App-Server Reality

What Changed

OpenHands' two-week stream is platform hardening: app-server consolidation, V0 cleanup, SDK bumps, saved model profiles, MCP proxying, sandbox grouping UI, Slack/Jira/GitLab/self-hosted integration work, ACP conversation routing, secret injection, and security fixes around log redaction and leaked hook config.

The diff-reviewed redaction commit is small but important evidence. When an agent platform handles credentials, subprocesses, integrations, hooks, and logs, security posture is not optional product polish. It is part of the agent surface.

Operator Consequence

OpenHands is moving like a real product/platform. The interesting frontier signal is not a single new capability; it is the consolidation of auth, secrets, app server, model profiles, sandbox policy, integrations, and enterprise/self-hosting paths.

Bitter Consequence

Bitter should watch OpenHands as a platformized agent environment rather than a CLI harness. Its changes are relevant to Hub, Grid, Pass, and Factory because it exposes how quickly "agent UI" becomes account, integration, security, sandbox, and deployment infrastructure.

The warning is clear: once the platform grows, authority and evidence boundaries must get sharper, not softer.