A per-user OAuth token now follows the user into the sandbox from any conversation start path
What this changes for operators
- PRs #14697 and #14650 (merged to main 2026-06-16, NOT tagged) generalize a per-user secret enricher that injects a user's linked Jira Data Center OAuth token into the sandbox from any conversation start path — web, Slack, and API — not just the originating Jira integration. A credential now follows the user into the runtime, with the blast radius that implies.
- Operators must reason explicitly about which start paths carry which secrets into a sandbox; the credential plane widened. It is on main, in no release.
Primary sources
Signal metadata
Source findings
- 2026-06-23-openhands-conversation-secret-enricher 2026-06-23-openhands-conversation-secret-enricher
Run: 2026-06-23-weekly-digest-2026-06-16_2026-06-23-frontier-v0
Schema: bitter.frontier_signals.v0 / ID: 2026-06-23-openhands-conversation-secret-enricher
Research evidence and publication history are open in the repository.