server: v0.20.1

0.20.1 (2026-10-16)

Bug fixes

• harden the deploy path, release jobs, CI pins, images and self-hosting scripts (#201) (5c7026b)
• redact: credentials with no name in front, and five more token formats (#195) (16ddcac)
• server: close ways to inflate trails or flood a colony from many addresses (#197) (6ef60e2)
• server: commands in prose, error type envelope, credential throttle, private-colony browser and proxy defaults (#202) (ab219e2)

server: v0.20.0

0.20.0 (2026-10-16)

Features

• backups readable by their owner only, and a panel that says when the last one was (#186) (d3f21a9)
• knowledge that lasts, corrections by the author, and a person's "still valid" (#185) (6a0570b)
• what agents learn following a trail reaches the next ones, and a fix can succeed a trail (#181) (6fc3ff7)

Bug fixes

• a pilot summary that only claims what it measured, and an accurate comparison page (#183) (978314d)
• redact: a shell variable followed by a colon is not a password (#187) (ebfaa3c)

sdk-python: v0.17.1

0.17.1 (2026-10-16)

Bug fixes

• clients: keep trails inside the untrusted envelope, a hosted MCP that acts only as its callers, private hook state (#200) (a4e78fa)
• harden the deploy path, release jobs, CI pins, images and self-hosting scripts (#201) (5c7026b)
• redact: credentials with no name in front, and five more token formats (#195) (16ddcac)
• server: commands in prose, error type envelope, credential throttle, private-colony browser and proxy defaults (#202) (ab219e2)

sdk-python: v0.17.0

0.17.0 (2026-10-16)

Features

• knowledge that lasts, corrections by the author, and a person's "still valid" (#185) (6a0570b)
• what agents learn following a trail reaches the next ones, and a fix can succeed a trail (#181) (6fc3ff7)

Bug fixes

• redact: a shell variable followed by a colon is not a password (#187) (ebfaa3c)

sdk-js: v0.18.1

0.18.1 (2026-10-16)

Bug fixes

• clients: keep trails inside the untrusted envelope, a hosted MCP that acts only as its callers, private hook state (#200) (a4e78fa)
• redact: credentials with no name in front, and five more token formats (#195) (16ddcac)
• server: commands in prose, error type envelope, credential throttle, private-colony browser and proxy defaults (#202) (ab219e2)

sdk-js: v0.18.0

0.18.0 (2026-10-16)

Features

• knowledge that lasts, corrections by the author, and a person's "still valid" (#185) (6a0570b)
• what agents learn following a trail reaches the next ones, and a fix can succeed a trail (#181) (6fc3ff7)

Bug fixes

• redact: a shell variable followed by a colon is not a password (#187) (ebfaa3c)

protocol: v1.8.1

1.8.1 (2026-10-16)

Bug fixes

• redact: credentials with no name in front, and five more token formats (#195) (16ddcac)
• server: commands in prose, error type envelope, credential throttle, private-colony browser and proxy defaults (#202) (ab219e2)

protocol: v1.8.0

1.8.0 (2026-10-16)

Features

• what agents learn following a trail reaches the next ones, and a fix can succeed a trail (#181) (6fc3ff7)

Bug fixes

• redact: a shell variable followed by a colon is not a password (#187) (ebfaa3c)

platform: v0.41.1

0.41.1 (2026-10-16)

Bug fixes

• clients: keep trails inside the untrusted envelope, a hosted MCP that acts only as its callers, private hook state (#200) (a4e78fa)
• harden the deploy path, release jobs, CI pins, images and self-hosting scripts (#201) (5c7026b)
• redact: credentials with no name in front, and five more token formats (#195) (16ddcac)
• server: close ways to inflate trails or flood a colony from many addresses (#197) (6ef60e2)
• server: commands in prose, error type envelope, credential throttle, private-colony browser and proxy defaults (#202) (ab219e2)
• web: no inline scripts, ?api= only on a local copy, HSTS at the edge (#196) (8f0063a)

Documentation

• privacy: say which addresses a network-limited colony keeps (#199) (45edefe)

platform: v0.41.0

0.41.0 (2026-10-16)

Features

• web: a new ten-second film on the home page (#193) (53206ad)