Nothing ships without a changelog.

1. v0.6.0BETA“Chain of Trust”3 Sep 2026
   • Approvals for contract publication and approval-gated invocations now bind to a SHA-256 digest of the exact operation and an expiry — a later, differing operation can no longer ride an approval issued for something else.
   • Standalone installers are now version-pinned and verify the release verifier's own digest against a value committed in the release tag, closing the prior circular trust in first-install verification.
   • The shared authority service now supports an application-level bearer token (AGENT_COMMS_AUTHORITY_TOKEN), required in production alongside existing TLS and signing-key requirements.
   • Orchestrator-grant and task-takeover approvals are now single-use — a matching approval is consumed once used and can no longer be replayed to re-authorize the same grant or takeover indefinitely.
   • Fixes two high-severity CVEs (google.golang.org/grpc, fast-uri).
2. v0.5.0BETA“Plain Speech”26 Aug 2026
   • Every command's default human output changes from a raw JSON dump to a readable summary — semantic status, tables, and next-action hints — while --json stays byte-compatible.
   • New --output human|plain|json|jsonl contract: plain is the stable uncolored fallback for redirected output, jsonl is a new versioned stream contract for watch and invocation listen.
   • agent-comms project delete permanently deletes a project, local and remote, with no automatic backup — OWNER-only, elevated-key required, no scripted path.
3. v0.4.0BETA“Proof of Presence”14 Aug 2026
   • Identity resolution can no longer silently misattribute a signed action to the wrong actor — closes a real, confirmed incident across the CLI, MCP, and TUI.
   • Self-service role switching (agent switch-role): any principal can relabel its own role, including freeform custom labels, with no owner/orchestrator elevation required.
   • interactive-serve now works on Windows, built on ConPTY in place of a unix domain socket and POSIX signals.
   • install.sh/install.ps1 and agent-comms update no longer need a separately installed cosign CLI to verify a release.
   • A deep TUI interaction audit: real mouse support in the command palette, a dead keybinding collision fixed, and a real focused-tab indicator.
4. v0.3.0BETA“Point and Click”8 Aug 2026
   • Full native mouse support across the TUI, which now scales to a real terminal size instead of requiring a desktop-sized minimum.
   • Session-pinned interactive delivery — a restarted session resumes the exact right conversation instead of racing each provider CLI's own guess.
   • A declarative JSON adapter system: add a new CLI provider without touching Go.
   • A public marketing site and docs site.
5. v0.2.1BETA“The Missing Bundle”2 Aug 2026
   • Hotfix: restored the Cosign-signed CLI installer bundles v0.2.0's release was missing, so install.sh/install.ps1 work again.
6. v0.2.0BETA“Chain of Custody”31 Jul 2026
   • One-command project upgrades, with automatic backup and full post-upgrade verification.
   • Orchestrator grants now require a separate, human-approved decision.
   • A passphrase-protected elevated key gates the most sensitive actions.
   • Interactive delivery is a real, auditable state machine — no connector can fake a delivery.
7. v0.1.0BETA“The Control Room”19 Jul 2026
   • First tagged release: signed events, protected work leases, typed messages, approvals.
   • Zero-setup SQLite personal authority, or a shared PostgreSQL team authority.
   • Full console TUI across Command, Work, Team, Relay, and Project hubs.

Compare tags