filipbalucha

Good question.

> for the "existing tasks stay on old version" case, do you support any kind of manual migration trigger

Yes, we support manually migrating tasks using "tu tasks migrate".

> if I fix a genuine bug in how I'm parsing a document, I might want to re-run the agent on specific old workspaces with the new version, rather than waiting for users to start new tasks

In this case the better pattern is to create new tasks against those old workspaces on the fixed version. You could do this on behalf of your users.

good point! programmable network policy and a gateway to prevent secret exfiltration are on the roadmap.

We overlap at the sandbox layer, but we're focused more on the layer above that: packaging agent code + deploying/versioning it, managing tasks over time, handling message persistence, and attaching durable workspaces to those tasks.