Changelog

// October 14, 2026

browser-extension 0.1.3

Browser extension

Double-click install wizard for Windows, macOS and Linux

• Install and uninstall wizards at the kit root, in Portuguese by default with an English toggle.
• A personalized kit can carry the enrollment token; the default kit never does.
• Verify step reads every browser profile to confirm the extension is loaded and on.

// October 13, 2026

api 0.52.0

Platform API

Opt-in redacted turn content with encrypted storage and audited reads

• Workspace setting with a written lawful basis and a retention period of up to 365 days.
• Every value the classifier matched is replaced by its category on the device before anything is sent.
• Ciphertext at rest; every read by an admin writes an audit row; a scheduled sweep deletes expired rows.

// October 13, 2026

browser-extension 0.1.2

Browser extension

Opt-in redacted content capture; findings page refresh fix

• Capture runs only while the device policy says redacted, and the page says so to the employee.
• A third upload queue, capped and bounded, sent to its own endpoint.

// October 13, 2026

api 0.51.0 · browser-extension 0.1.1

Platform API · Browser extension

Conversation sessions and turns from the browser sensor

• Each ChatGPT or claude.ai conversation becomes a session; each confirmed send a turn; findings attach to the turn.
• Session ids are derived on the device from the conversation id and never sent raw.
• Sessions end after thirty minutes without a turn or when the tab closes.

// October 13, 2026

api 0.50.0

Platform API

DLP findings join the agent inventory

• Each enrollment token creates an agent in the inventory; every finding from its devices is attributed to it.
• Each detection becomes a governance event with occurrence counting, reopen, alerts and webhooks.
• Findings carry sensor, kind, destination, channel and device in their evidence.

// October 12, 2026

api 0.49.0 · browser-extension 0.1.0

Platform API · Browser extension

Enrollment tokens, device tokens and content-free findings ingest

• Devices enroll with an enrollment token and receive a token that can only post findings and heartbeats for itself.
• Twelve recognizers on the device: CPF, CNPJ, RG, CNH, CNS, CEP, email, Brazilian phone, card numbers, API keys, JWTs, private keys.
• Device tokens are default-deny on every other route; revocation is terminal.

// October 12, 2026

api deploy

Platform API

Platform API on Google Cloud Run

• The API ships to Cloud Run; the previous pipeline is retired.

// October 1, 2026

api 0.45.0 – 0.48.0

Platform API

Agent 360, scan lineage and workspace setup

• Agent 360 shows the topology an agent actually walked; observed agents are read-only.
• Scans keep their lineage across re-runs.
• Every support access to a workspace is audited.
• The playground runs flows on the workspace's own model key.

// September 28, 2026

scanner 1.0

Scanner

Ten agent-native checks and endpoint hygiene

• Core, surfaces and topology suites: prompt injection, system-prompt leak, tool-output injection, indirect injection, encoding obfuscation, MCP supply chain, sensitive-info disclosure, handoff escalation, autonomy-scope mismatch, multi-turn escalation.
• Endpoint hygiene reports the clean case and the unreachable case as information, never as a pass.
• Checks are selected per scan; the catalog is exported for the platform's check sets.

// September 27, 2026

sdk 0.8.3 · gov-spec 0.9

Python SDK · Wire protocol

Multi-mode capture and a stricter wire protocol

• Capture modes for CrewAI, LangGraph, OpenTelemetry, LiteLLM, MCP, HTTP and manual seams.
• Privacy modes, sessions and local detections in the process; an optional LLM judge on your own model.
• Thirty-one event types, declared-limit carriers and the content-free detection event.