Enclave 0.8.0 fixes silent security defaults that left LLM agents exposed

The open-source Enclave runtime for autonomous LLM agents has released version 0.8.0, addressing several security flaws that made protections appear active when they were not. A read-only container mount (:ro) was mistakenly treated as access scoping, when it only prevents writes and still allows a compromised agent to read all files. The network egress default-deny policy required a four-step manual setup ritual to activate, meaning it was effectively off for most deployments. Additionally, a published allowlist file had no enforcement scanner behind it, making it a false control, and a capability health check returned path existence rather than verified authentication. The new release scaffolds kernel-level egress blocking by default, ships the missing CI scanner, and fixes the web interface to reject insecure bind configurations without a valid token.