# ConnectOnion 1.9.2rc1 (release candidate)

## Install this preview

Stable remains 1.9.1. Install this release candidate by exact pin:

```bash
python -m pip install --upgrade 'connectonion==1.9.2rc1'
```

## Both directions, end to end

1.9.2b31 was run as two people would use it, in the real Codex and Claude Code
apps with fresh identities on each side and the shipped skill:

- **Claude Code to Codex and Codex to Claude Code.** The sender asked for a
  handoff, read the preview and said yes; the recipient pasted one line. The
  recipient's agent accepted, did the work, sent a patch back, and the sender's
  `git apply` took it cleanly. No other step needed a person.
- **Codex to Codex** passed the same way on 1.9.2b30, where it found the patch
  bug that b31 fixed.
- **Privacy:** a private remark in each session ("at the dentist on Friday")
  was removed before the preview.
- **Permissions:** after each acceptance both sides held the other at
  `handoffs` only.

## Changes since 1.9.2b31

- `co trust list` no longer says an accepted handoff makes a contact; the
  Handoffs only list says both sides of a handoff land there.
- The recipient's agent is told its patch holds only its own changes, so its
  done note says so instead of claiming it includes the sender's.

## Verification and limits

- Each change has a test that failed first; the handoff and trust tests pass.
- Known and open: the sender's Codex does not notice by itself when the
  recipient finishes (#2507); what a full contact may run through a host's
  `Bash(co *)` whitelist (#2506).