v5.5.0

Changed

• Integrate current-user authorized native Foundry IQ retrieval with hosted agents and maf_lite, keeping delegated credentials request-local and preserving source permissions.
• Protect citation downloads with signed user/session-bound grants, current-user Storage authorization for shared documents, and exact-document checks for conversation uploads.
• Support downstream Conditional Access recovery in standalone and embedded UI sessions through explicit sign-in, without automatically replaying failed or partially completed operations.
• Reconcile native document permission profiles without deleting indexed documents or operator customizations. Validate enabled sources and Work IQ consent before changing Search resources.
• Make orchestrator development deployments manually dispatched while retaining normal source quality checks.

Component versions

Component	Version
agent-app-ui	v3.4.0
agent-app-orchestrator	v5.3.0
agent-app-ingestion	v3.1.3
infra / AI Landing Zone	v2.7.3

Validation

• Platform retrieval provisioning, release pins, shared application composition and Terraform interface contracts: 76 tests and 157 subtests passed.
• Orchestrator acceptance: 2,604 cases, zero failures or errors, 156 focused cases, and all five protected quality checks.
• UI acceptance: 650 cases, installed-wheel and offline Linux-container execution, hosted SDK contracts, and all five protected quality checks.
• Central documentation builds with mkdocs build --strict, covering authentication, source authorization, protected downloads, sign-in recovery and both infrastructure-provider runbooks.