Session permission rules with automatic approval let admins control who can access managed sessions. An opt-in external-scratch runtime provider lets operators run HTTP services that host session workers while preserving attestation and recovery. The Web Shell now accepts a Git URL when adding a workspace, cloning the repository directly into the browser environment. Managed agents can upload files to workspaces and create native snapshots that can be recovered via HTTP. The /autofix-pr command shows watch status in the Web Shell, allows stopping watches, and can run fix agents unattended in the background.