Changelog
What shipped, and when.
Kernel, control plane, fleet, and SDK releases. Breaking changes are called out in the entry rather than buried in a migration note.
01 / releases
Quorum approvals and business-hours policy
- Policy supports quorum: N, requiring multiple distinct human approvers on one action.
- deny_self_approval makes segregation of duties structural — a preparer principal cannot approve its own entry.
- business_hours constraints with timezone, so payment actions can be barred outside working hours.
- Approval requests now carry the full argument diff into Slack rather than a summary.
Faster restore, smaller snapshots
- Snapshot restore p50 down from 1.4s to 610ms on a 4GB working set.
- Incremental snapshots cut storage for long-running sessions by about 70%.
- ap-northeast (Tokyo) is live for sandboxes and gateway.
Column-level data policy
- deny_columns with deterministic hash redaction, so an agent can join on a value it cannot read.
- max_bytes_scanned ceilings per query and per session for warehouse workloads.
- Snowflake, BigQuery, Databricks, Redshift, and Postgres supported at the gateway.
Evidence verifier open sourced
- velone verify is Apache 2.0 and runs against an export with no network access.
- Signed chain checkpoints published every 1,000 entries.
- Field-level redaction preserves the original value's hash so the chain stays intact.
MCP gateway
- Register an MCP server once; every tool it exposes inherits policy.
- Tools that appear after a server upgrade are denied until explicitly allowed.
- Per-upstream rate limits to stop a looping agent exhausting a partner quota.
BYOC on AWS
- Terraform module places the data plane in your own account.
- Only scheduling decisions, policy versions, and chain heads cross the boundary.
- Customer-managed KMS keys for workspace and evidence encryption.
First stable kernel
- Sessions, sandboxes, policy, and evidence as one boundary.
- Firecracker microVMs with default-deny egress and zero standing credentials.
- Adapters for Claude Agent SDK, OpenAI Agents SDK, LangGraph, and CrewAI.
- TypeScript, Python, and Go SDKs plus the CLI.
Ring 0
Want something on this list?
Design partners set the roadmap. The last four releases came out of things partners hit in production.