2.1.219 ships sandbox.network.strictAllowlist, raises nested subagent depth from 1 to 3, and caps dynamic workflows at medium by default — three changes that alter security posture, cost exposure, and agent orchestration policy without a single code change.
CVE-2026-55607 is a high-severity Claude Code vulnerability in which a malicious repository could steer the coding agent into unsandboxed code execution. Patched in 2.1.163, it changes how operators should version-pin and audit Claude Code in shared gateway environments.
Grok Build 0.2.66 upgrades its sandbox with glob-pattern deny lists and kernel-level filesystem protection for custom profiles, while adding MCP server auto-recovery — three changes that operators routing Grok Build in production must audit before deployment.
Anthropic's May 2026 webhooks release adds event-driven session lifecycle control, multi-agent orchestration, and self-hosted sandboxes to Managed Agents — what routing and platform teams need to know.
