Asking for Docker got you the host until v1.20.0
Before v1.20.0 (2026-09-17), OH_CONVERSATION_RUNTIME=docker was not forwarded to the bundled agent server, so conversations ran locally on the host. PR 17462 (merge 3b29fd61) is an ancestor of v1.20.0 and not of v1.19.0. The same two releases made profiles enforceable scopes for MCP servers (v1.19.0) and secrets (v1.20.0); before v1.19.0 every profile could reach every MCP server.
What this changes for operators
- If you set the Docker runtime on OpenHands before v1.20.0, assume those conversations ran on the host and audit what they touched. Upgrade to v1.20.0.
- Evidence that would settle residual: a runtime probe on v1.20.0 showing the conversation process inside the container.
Primary sources
- merged_pr 2026-09-21-openhands-docker-conversation-runtime-settings-reach-the-bundled-agent-server-v1-20-0-docker-executi github.com/OpenHands/OpenHands/pull/17462
- merged_pr 2026-09-21-openhands-profiles-become-enforceable-scopes-mcp-servers-v1-19-0-and-secrets-v1-20-0-with-a-skill github.com/OpenHands/OpenHands/pull/17289
- merged_pr 2026-09-21-openhands-profiles-become-enforceable-scopes-mcp-servers-v1-19-0-and-secrets-v1-20-0-with-a-skill github.com/OpenHands/OpenHands/pull/17237
- tagged_commit_file 2026-09-21-openhands-profiles-become-enforceable-scopes-mcp-servers-v1-19-0-and-secrets-v1-20-0-with-a-skill OpenHands/software-agent-sdk / openhands-agent-server/openhands/agent_server/server_details_router.py
Signal metadata
Source findings
- 2026-09-21-openhands-docker-conversation-runtime-settings-reach-the-bundled-agent-server-v1-20-0-docker-executi 2026-09-21-openhands-docker-conversation-runtime-settings-reach-the-bundled-agent-server-v1-20-0-docker-executi
- 2026-09-21-openhands-profiles-become-enforceable-scopes-mcp-servers-v1-19-0-and-secrets-v1-20-0-with-a-skill 2026-09-21-openhands-profiles-become-enforceable-scopes-mcp-servers-v1-19-0-and-secrets-v1-20-0-with-a-skill
Featured in
- Before the First Turn / 2026-09-21
Run: 2026-09-21-weekly-digest-2026-08-20_2026-09-21-frontier-v0
Schema: bitter.frontier_signals.v0 / ID: 2026-09-21-openhands-docker-runtime-was-ignored
Research evidence and publication history are open in the repository.