Signals

2026-09-21 / OpenHands

Asking for Docker got you the host until v1.20.0

Edited by Michael Ruescher

Before v1.20.0 (2026-09-17), OH_CONVERSATION_RUNTIME=docker was not forwarded to the bundled agent server, so conversations ran locally on the host. PR 17462 (merge 3b29fd61) is an ancestor of v1.20.0 and not of v1.19.0. The same two releases made profiles enforceable scopes for MCP servers (v1.19.0) and secrets (v1.20.0); before v1.19.0 every profile could reach every MCP server.

What this changes for operators

  • If you set the Docker runtime on OpenHands before v1.20.0, assume those conversations ran on the host and audit what they touched. Upgrade to v1.20.0.
  • Evidence that would settle residual: a runtime probe on v1.20.0 showing the conversation process inside the container.

Signal metadata

Source findings

Featured in

Run: 2026-09-21-weekly-digest-2026-08-20_2026-09-21-frontier-v0

Schema: bitter.frontier_signals.v0 / ID: 2026-09-21-openhands-docker-runtime-was-ignored

Research evidence and publication history are open in the repository.