Skip to content

Releases

What changed and when.

Releases are versioned, signed, and accompanied by a software bill of materials — no silent changes, no undisclosed fixes. This page documents what ships in each version, from the first public release on.

  1. v26.8.0

    First public release

    One self-hosted Go binary to run and govern the AI agents you already use — durable work items with fenced leases, four deny-closed enforcement points, a read/write access map with permitted-vs-observed drift, and a hash-chained, signed audit ledger.

    Added
    • Work plane: durable work items, fenced leases (acquire, renew, release, take over, revoke), launch-for-work and A2A delegation to authorized peers with durable receipts; messages with acknowledgements scoped to an orchestration workflow.
    • Governance: Cedar authorization (RBAC + deny-overlay + scoped grants), four deny-closed enforcement points — the Claude Code PreToolUse/PostToolUse hook, an inline /v1/messages inference proxy, an MCP tools/call gate and an A2A delegation gate — two-person approvals, break-glass with dual control and an estate kill-switch.
    • Evidence: append-only, hash-chained audit ledger with Ed25519-signed checkpoints; exports to CEF, LEEF, syslog, OTLP and OCSF; push to Splunk HEC, Microsoft Sentinel, Datadog, New Relic and HMAC webhooks; 26 compliance framework catalogs.
    • Integrations: 30 modules and 158 integrations — Claude Code at the hook, Codex and Grok Build as first-class command surfaces, gemini-cli, Cursor, opencode, goose, cline, OpenHands, OpenClaw and Hermes as connectors, each stating what it can enforce versus only observe.
    • Modules named for the roadmap, all in the community binary with no license check: the MCP catalog and admission (approved agents, MCP servers, skills and templates, MCP admission policies) with the MCP introspection source and the MCP tools/call gate; FinOps budgets that deny or throttle spend, live in the default binary with no provisioning; compliance evidence mapping over 26 framework catalogs with sealed, exportable evidence.
    • Distribution: signed archives for linux/darwin (amd64/arm64, FIPS builds alongside), .deb/.rpm/.apk packages with a hardened systemd unit, multi-arch container images on Docker Hub and GHCR (with -fips and -stig variants), a Homebrew cask and a one-command verified installer.
    Security
    • The checksums manifest and the container image are cosign-signed (keyless); archives carry SPDX and CycloneDX SBOM attestations plus OpenVEX statements, and the set carries SLSA build provenance; scripts/verify-release.sh verifies what it recognizes and says what it skipped, offline if you prefer.
    • No mandatory telemetry and no control-plane egress by default; license validation is offline; the one vendor call is olivares upgrade, and --endpoint points it at your own mirror.
    View release on GitHub

Stay informed

Watch the GitHub repository or subscribe to the RSS feed to be notified of every new release.

Watch on GitHub RSS feed

Every release is verifiable

Signed binaries, SLSA attestations, and SBOM ship with every public release — verify the provenance and integrity of each artifact without trusting us.

How releases are verified Trust Center