Changelog — 2026-05-28 — Standards Docs

Breaking

Record create/update now reject unknown attribute keys (#660). RecordService.createRecord and updateRecord call the new rejectUnknownAttributesOrThrow helper from @stndrds/schema and throw ValidationError → HTTP 400 listing every offending key. Previously, unknown keys silently fell through into record.values. Callers that pass validate: false keep the silent-strip behavior, and the storage layer drops unknown keys either way as defence in depth. Make sure your create/update payloads only carry attributes declared on the object — see the updated Records and Troubleshooting pages.

browser-automation built-in skill. @stndrds/runtime exports a new entry in BUILT_IN_SKILLS that teaches agents to drive Chromium through playwright-cli inside the sandbox — page snapshots, screenshots, click/fill scripts, console and network checks, responsive viewports. The E2B template (@stndrds/adapter-e2b) now installs playwright@1.60.0, @playwright/test@1.60.0, and @playwright/cli@0.1.13 globally and in /workspace, pre-fetches Chromium via playwright install --with-deps chromium, and pins PLAYWRIGHT_BROWSERS_PATH=/ms-playwright so the CLI launches deterministically. A build-time smoke test verifies chromium.launch() succeeds before the image ships. See the updated Agents concept and AI Agents guide.

E2E and sandbox infrastructure updates: Playwright is now installed in the sandbox E2E Docker image and exposed to workspace scripts. No developer-facing API change.