OpenAI Agents SDK v0.19.1: Native Host Path Grants Simplify Sandboxed File Access

What changed

Agents SDK v0.19.1 adds support for native host paths in sandbox path grants, making it easier to give agent processes constrained access to files on the host system. This is a narrow but practical enhancement that aligns with real-world agent workflows.

Significance for enterprises

Allowing native host paths reduces friction when integrating agents with existing datasets, models, or connectors that live on host storage. For engineering teams, it speeds prototyping and decreases the amount of glue code required to present file-system resources into sandboxes. For security teams, it alters the threat model: granting path access must be deliberate and least-privilege, because misconfigured grants can expose sensitive data.

Risks and mitigations

Treat this as a trade-off between operational convenience and control. Recommended practices include: implement explicit allowlists rather than broad mounts, audit and version path-grant policies, and combine host-path grants with runtime isolation (containers or VMs) and runtime monitoring. Make sure CI pipelines and IaC codify grants so reviews and approvals are traceable.

Actions for leaders

1. Inventory agent use-cases that require host path access and classify data sensitivity.
2. Update security policies and change-control flows to require justification and limited scope for path grants.
3. Pilot the feature with targeted teams and build observability around file access and error handling.

This SDK update helps teams iterate faster but should be rolled out with disciplined governance to avoid accidental data exposure.