v1.28.0 — Pick your GitHub repositories from a list

This release turns the GitHub connection on. When you set up a project, you can now pick its
repository from a list of your own. Plenipo by 8 West Ventures, LLC.

Highlights

• Sign in with GitHub, then pick from a list. In Settings → Connections, press Sign in with
  GitHub. Plenipo shows a short code and opens GitHub's own page. Type the code there, and
  that's it. No password goes into Plenipo. The sign-in is read only and free: Plenipo
  sees the names and descriptions of your repositories and who works on them, and never your code.
  No worker ever uses it.
• A repository list on every project. In New project, Edit project, and Set up a
  Development project, the repository box searches your repositories, your organizations' too,
  with private ones marked. Typing or pasting any address still works.
• Where a project's files go. The project dialog asks Where its files go: make a folder in
  the organization folder (the default), or use a folder you already have.
• Work goes in its place. In an organization folder, work that belongs to no project goes in
  the worker's own scratch pad. A project with no folder of its own keeps its work in its Files
  folder. The Files tab marks the files being changed.
• Clearer chats between agents. Each step of a worker's chat says what started it, such as
  "continued with handoff replies" or "checked in on its team". "From its lead" is shown for each
  message, not once for the whole chat.

Fixed

• If a project's Files folder cannot be used, the worker's note now says why, instead of saying
  the project has no folder.

For you, the owner

• Install this update on your PC. Plenipo offers it by itself (it checks GitHub once a day), or
  you can download it from this release.
• To use the list, open Settings → Connections → GitHub, sign in, and choose on GitHub which
  accounts Plenipo may list. If a repository is missing, use Not here? Add an account or
  organization on GitHub, then Look again.

Good to know

• The decisions are ADR-204 (a read-only
  GitHub connection), ADR-205 (the organization
  folder), and ADR-208 (talking to an agent is
  direct); the owner accepted all three on 2026-10-06.
• Making a copy of a repository on your PC comes in a later release.

v1.27.0 — The organization folder, a tree of your workers, and a straight line to each agent

This release fixes the Stop buttons, gives each organization a folder of its own, turns the
Workers tab into a tree you can open, and lets you talk to an agent without anyone in between.
Plenipo by 8 West Ventures, LLC.

Highlights

• Stop works. The Stop button in a chat now ends the agent's turn, and Stop all ends every
  running agent. If an AI tool goes quiet for a few minutes, the chat says so, and after ten
  minutes Plenipo stops it for you. A stopped turn says "Stopped".
• Your organization has a folder. A new organization gets a folder with a place for each
  department, each project, and each agent's scratch pad. The Files tab opens that folder.
  Plenipo never opens a file that OneDrive keeps only online just to list it, and it will not use
  a folder that is not safe to use (for example a system folder or a drive's top folder).
• The Workers tab is a tree. Open a department, then a project, then a worker, and read that
  worker's chat. It streams as the AI tool writes. Chats between agents, such as a supervisor and
  the worker it handed work to, show in the chats of both.
• Talking to an agent is direct. What you type in an agent's chat goes straight to that agent.
  The Liaison is now only for work that passes between agents.
• What a task cost. After a task finishes, its page shows the tokens used (read, reused, and
  written) and, on paid keys, the money. On a subscription it shows tokens only.
• Edit a project. Projects now have an Edit button on the Projects page and on the
  project's own page.
• A worker's chat after the work is done. Opening a worker's chat later still shows the whole
  conversation.
• GitHub sign-in (not turned on yet). Settings → Connections has a GitHub sign-in that can
  list your repositories. It stays unavailable in this release until 8 West's GitHub app is
  registered, and Plenipo says so on the screen.

Fixed

• A chat's Stop button, and Stop all, now end the agent's turn.
• An AI tool that froze while "writing" is noticed, and a note shows in its chat.
• Live text in a chat is hidden as whole words, so a secret is never shown a letter at a time.

For you, the owner

• Install this update on your PC. Plenipo offers it by itself (it checks GitHub once a day), or
  you can download it from this release.
• To use the organization folder, make a new organization or open the Files tab. If the folder is
  in OneDrive, Plenipo asks you to turn on Always keep on this device for it in your OneDrive
  settings.

Good to know

• The decisions are ADR-204 (a read-only GitHub connection), ADR-205 (the organization folder), and
  ADR-208 (talking to an agent is direct); the owner accepted all three on 2026-10-06.
• Chats that began before this update keep their older instructions to the AI tool until the team
  or its limits change.
• Setting up a project with its own folder, picking a repository from a list, and moving files to
  your computer come in the next release.

v1.26.0 — A chat window for each agent

This release lets you pop out each agent's chat into a window of its own, so you can watch
several agents at once. Chats also remember their steps after Plenipo starts again. Plenipo by
8 West Ventures, LLC.

Highlights

• Each agent's chat in a window of its own. Pop out an agent's chat from its details on the
  map, its page, the Chat panel, or its live conversation, or double-click the agent on the map.
  The window is the same live chat, message box and all, and its title shows the agent's name. Up
  to six at once; Put back, or close the window, to bring it back to the Chat panel. The
  windows open again after a restart.
• Chats remember their steps. After Plenipo starts again, an agent's recent conversations show
  their steps and notes again, not only what was asked and answered.

Fixed

• An answer said once. Opening the chat of an agent that had just finished no longer shows its
  answer twice.

For you, the owner

• Install this update on your PC. Plenipo offers it by itself (it checks GitHub once a day), or
  you can download it from this release.

Good to know

• The decision is ADR-203 (each agent's
  chat in a window of its own), asked for by the owner.

v1.25.0 — Fixes, and a simpler Plenipo you can see and steer

This release fixes what was broken, makes Plenipo simpler to set up, and lets you watch and stop
the work as it happens. AI plans last longer, made-up answers are caught, and leads can stop their
own team mid-task. Under Careful, build and test commands now ask first, and Guard checks files and
scripts more closely. Plenipo by 8 West Ventures, LLC.

Fixed

• A new organization no longer freezes Plenipo.
• Usage adds up every organization, not only the first one.
• One green light on an AI tool's card when its subscription or its key works.
• Save a paid key once for the whole PC. Every organization uses it.
• A page no longer shows old information right after a change. An older answer that arrives
  last no longer replaces a newer one. A request you just answered no longer shows as waiting
  again, and a change you just made no longer flips back on screen. This covers Approvals,
  Activity, Projects, Learning, Servers, Settings → Permissions, Connections, AI models, and AI
  tools, the organization's map and chart, each department's, project's, worker's, and task's
  page, and the top bar's Showing picker.
• The file editor shows when a worker is writing a file. After you save, the editor checks
  again whether a worker is writing that file, so it no longer stays open for editing while a
  worker writes it. And it no longer goes back to read-only after the worker is done.
• New work starts right after a stop. After you press Stop, a new objective for that worker
  starts right away. It no longer says "A turn is already running". When a lead stops a worker's
  task and hands it new work, that work waits a moment and starts, instead of failing. And a
  worker's next task starts as soon as its last one is recorded.

Simpler

• AI tool cards start closed, with a light and one line each. A card that needs you starts
  open.
• Fewer questions about models. Plenipo no longer asks for a model's context size, or whether
  it makes images or uses a computer.
• Who uses what (Settings → AI models) picks the exact model for each job, on one screen.
• The team you hired comes first. A new project uses the workers you already have, and a
  manager asks before bringing in one you don't.
• Templates for organizations, departments, and projects, and you can save your own.
• A nine-step setup tour, from signing in to your first objective. Take the setup tour
  again is in Settings.
• Enter sends. Where you give an agent its work (Give an objective on the map and on the
  Projects page, Ask a question, and New task and Continue in Workers), Enter sends and
  Shift+Enter starts a new line, as in the Chat. Nothing is sent while the button can't be pressed.
  Typing in another language on a Mac or Linux no longer sends by accident when you press Enter to
  finish a letter, in the Chat and in Community messages.

See and steer the work

• Watch a worker type its answer live, with its steps in plain words ("Running npm test").
• Thinking reads as one paragraph. On the Workers page, Claude's thinking showed a few letters
  on each line. It now flows into one paragraph that grows as Claude thinks, like its answer, and a
  long thought no longer pushes the agent's earlier steps off the page. While an agent thinks, its
  live conversation says Thinking…
• Watch shows what commands change. Plenipo notes the files before a command and compares them
  after.
• Stop on every worker. Only that task stops, and its lead carries on.
• Stop all work is on every page that shows work. Nothing new starts until you press Allow
  again.
• Ask a question opens a side chat with a manager or supervisor. It only answers, and it never
  touches the work.
• Leads can stop their team mid-task. While their team works, supervisors, managers, and VPs
  get short check-ins: when an answer comes back while other work still goes, and after a long
  wait. They can stop work they handed on that no longer makes sense, with a reason. Activity and
  Handoffs show who stopped what and why ("Stopped by Website Supervisor: …"). Your own Stop
  and Stop all work as before.

Plans that last

• Prompt caching on Anthropic models. The Usage tab shows what came from the cache.
• When a plan runs out, a notice gives you choices: Wait, Use a reset, Pick it up
  now, Use another AI tool, or Leave stopped. Unless you chose Leave stopped, the work
  starts again by itself after the reset.
• Plan numbers in plain words.
• Your subscription first, then the same company's key. This happens only when Let workers
  use paid AI keys is on, a key is saved, and there is room under your spending caps.
• Step down instead of stopping. Near your limit, a worker moves to a lower effort or a
  smaller model first. Its Why says so, and Activity records it.
• A fair pace across the week and the month. Your plans on the AI tools page shows each
  plan's pace.

Made-up answers caught

• Every answer is checked against Plenipo's own record of files, tests, and pull requests. One
  that doesn't match shows "Doesn't match the record" and is sent back once to check.
• Links and pull requests named in an answer are checked. A link is looked at only when its
  website is on your allowed list.
• Leads can send work back.
• A notice when a worker keeps failing.

Safer

• Build and test commands ask first under Careful. Commands such as npm test,
  cargo build, and pytest run code the project itself holds, so they are no longer on the
  Approved list Plenipo starts with.
  • On Light (where Plenipo starts), nothing changes. On Strict, workers still run no
    programs.
  • On Careful, each one shows an approval card every time. To stop that for a project you
    trust, add the command to Approved in Settings → Permissions.
  • A new install starts with four approved commands: tsc, ruff, black, and gofmt. An
    install from an earlier version loses the old starting lines once, word for word. Lines you
    wrote or changed stay, and Activity says what changed.
• Web pages and SVG drawings open in Plenipo only. Open in another program refuses .html,
  .svg, and similar files, because their scripts would run in your browser. It also refuses more
  kinds of script, such as .ahk, .rb, .tcl, .r, and .jl.
• The git tools look only at the project folder, even when it sits inside a larger repository.
  git status leaves blocked files, such as .env, out and says how many.
• A file named by its full path gets the same name checks as one named from the project folder.
• A file is checked again at the moment it is opened. On Windows, a file a worker reads or
  changes is opened without following a link put at its name at the last moment. A Mac and Linux
  already did this.
• A hard-linked file is never changed by a worker. A hard link is the same file in two places,
  which no folder check can see. The worker is told to copy it first. The packages pnpm installs in
  node_modules are hard links, so a worker can no longer change one of them in place.
• The programs inside a PowerShell script follow your lists under Light, as a command line
  does. A script that names a program on your Never run list is refused, with the line. One
  that names a program on your Always ask me first list, deletes or moves files outside the
  project folder, or has a line Plenipo cannot read shows an approval card that says which line and
  why. Ordinary scripts run as before. Under Careful and Strict, nothing changes: every
  script already asked, or none runs.
• Guard reads commands inside shell text more closely, and stays allow-first. Nothing new is
  refused for ordinary commands.
  • Asking whether a program is installed (command -v rm) is no longer refused, even when that
    program is on your Never run list.
  • A rule you write on a word such as nohup, env, or time now also catches it inside shell
    text, such as bash -c "nohup make", as it already did on a plain command line.
  • The settings such a word takes before its program are read correctly. An option Guard does not
    know asks you, instead of guessing.
  • A program's name written in pieces, such as r"m", r\m, or cmd's r^m, is read as the
    program the shell really runs, so your lists still catch it. Ordinary quoted words, such as
    "my file.txt", read as before.
• Stricter checks for hidden characters. Text a worker types on your screen can no longer hold
  any invisible character, because you approve that text from a card and must see all of it. As
  before, this means joined emoji (such as the family emoji or the rainbow flag), the England,
  Scotland, and Wales flags, and the joiners that Persian and Urdu use between letters cannot be
  typed by a worker. Plain emoji still work.
• Words on screen are checked for secrets before they appear. When an AI tool writes a
  password or key a few letters at a time, Plenipo now holds back the word it is still writing and
  checks the whole word first. Before, a key split across pieces could appear on screen. The saved
  history and your phone were never affected. A word now shows when its last letter arrives, so the
  text looks a little more like this chat.
• An AI tool's update records in Activity the exact command it ran.
• A browser click you approved goes only where its card said. Plenipo stays allow-first:
  ordinary clicks still never ask, and nothing changes for them. Only a click that already asked
  for your approval, such as one that sends a form, is now limited to where its card said. The card
  now says where the form sends, for example "sends to shop.test/send". If the page tries to send
  it somewhere else after you approve, or slide...

v1.24.0 — A live chat with each agent

This release lets you chat with each agent and watch it work as it happens. Agents now save files
and run programs without asking you first, and orders and results travel along the chain of
command. Adding a phone, staying signed in on it, the license check, and the phone relay are also
safer. Plenipo by 8 West Ventures, LLC.

Highlights

• A live chat with each agent. Choose an agent on the Organization map and press Chat, or
  use Chat in its details panel or in the top bar. The Chat panel sits beside Terminal and
  Files, or opens in its own window. Each agent gets its own tab, and Side by side shows up to
  four chats at once.
• Watch the work as it happens. The answer appears word by word. A line says what the agent is
  doing now, with a timer ("Running a script · 2m 18s"), and says so when Claude's servers are busy
  and it tries again. Claude's thinking and each run of steps are one line you can open. A message
  you send while the agent works waits its turn, and Stop stops the work.
• Agents save files and run programs. Settings → Safety has three choices: Light (where
  Plenipo starts), Careful, and Strict, and says what each one means. VPs, Managers, and
  Supervisors start with Everyday work.
• Find what an agent made. Work that belongs to no project is saved in Plenipo's folder:
  Documents → Plenipo → your organization → the agent. Under each answer, Files saved lists the
  files and where they are, with Open folder.
• The chain of command. When you give an order straight to an agent lower down, the leads it
  skipped are told. When the work is done, the result is reported back up one level at a time, and
  each lead's chat shows it under Chain of command. An order for an on-call worker, such as a
  Developer, goes through its lead, who hands it on.

For you, the owner

• Install this update on your PC. Plenipo offers it by itself (it checks GitHub once a day), or
  you can download it from this release.
• On Light, agents act without asking you first. A program or script an agent runs can do
  anything you can do on your PC, and Plenipo cannot see everything inside one. To be asked before
  a program that is not on your approved list runs, and before every PowerShell script, choose
  Careful in Settings → Safety. On Strict, agents only read.
• A Supervisor still on Read only moves to Everyday work once, unless you chose its
  permissions yourself. A choice you made stays as it is.

Fixed

• A program that ends at once no longer keeps showing as "Running" on the AI tools page. Its
  end could arrive before Plenipo's own note that it had started.

Security

• Adding a phone shows six check digits on both screens. Add the phone only if they match; a
  name alone proves nothing. A phone that lost the race is told why, and Activity records it.
• A phone left open signs out. It no longer stays signed in just because its page refreshes by
  itself. After 30 minutes without a tap, it signs out, as promised.
• Pro ends at most 30 days after the paid-through date when no check has gone through, and a
  lost license record no longer starts the 30 days again. A copy of the license record's dates is
  kept next to the key, in Windows Credential Manager or your Linux password store; deleting your
  Plenipo data removes it. If Pro is off because Plenipo could not confirm the subscription,
  Settings says so and names the address a work network must allow (account.getplenipo.com).
• The phone relay is harder to flood. It limits connections per phone, per license, and per
  address, closes a phone or PC that stops reading, and forgets idle addresses. Your PC drops a
  connection for adding a phone that does not finish within a minute.

Good to know

• Never allowed, whichever you choose: reading or changing your secrets and the files on your
  blocked list, running the programs on your Never run list, and opening or changing files outside
  the agent's own folder with Plenipo's file tools. Sending work out, like pushing code to GitHub,
  still asks you first.
• A lead in its team's project folder reads there and hands each change to the worker who makes
  it, so each folder has one writer and your own saves never wait.
• A lead hears its news once. The next time you write to a lead, its agent gets a short note of
  what came back up to it.
• Not yet: AI tools that write answers only (Ollama, OpenRouter, direct keys, GitHub Copilot,
  and Antigravity) cannot save files or run programs; the chat says so when it applies. A link an
  agent wrote copies its address instead of opening.
• What was built and tested is in the checklist and the
  acceptance report. The decisions are
  ADR-200 (a live chat with each agent),
  ADR-201 (light by default), and
  ADR-202 (the chain of command). The security fixes
  are ADR-211 (Pro ends a set time
  after the paid period) and ADR-212 (the owner
  compares six digits).

v1.23.0 — Linux (first look)

Plenipo now runs on Linux. This is a first look: it works, and the owner is still trying it
on a real Linux PC, so expect small fixes in the next few versions. The Mac comes next (Phase 23,
Wave 3). On Windows, nothing changes. Plenipo by 8 West Ventures, LLC.

Highlights

• Two Linux downloads on this release page:
  • Plenipo_1.23.0_amd64.deb for Ubuntu 22.04, 24.04, and 26.04, and Debian 12 or newer.
    Open it with your software installer, or run sudo apt install ./Plenipo_1.23.0_amd64.deb.
  • Plenipo_1.23.0_amd64.AppImage for most other Linux. Mark it as a program (right-click →
    Properties → "Allow executing", or chmod +x), then open it.
• Updates. The AppImage updates itself, checked with the same updater key as Windows. A copy
  installed from the .deb tells you when a new version is ready and opens this page to download
  it.
• Your saved keys live in your computer's password store (GNOME Keyring or KWallet), never in
  a file (ADR-153, saved keys on Linux). The .deb suggests GNOME Keyring if you have none.
• Delete my Plenipo data, in Settings → Info on Linux (and on a Mac, later). Removing an app on
  Linux never touches your home folder, so this button does it. It asks first, removes the keys
  Plenipo saved, deletes Plenipo's own folders, and quits.
• The workers' browser can be Microsoft Edge, Google Chrome, Chromium, or Brave. A Chromium
  from the Snap Store can't be used, and Settings says why.
• The tray. Plenipo sits in the tray on desktops that show one. Where the desktop has no tray
  (plain GNOME without its extension), the window stays open, and closing it quits Plenipo.

For you, the owner

• Try it on a Linux PC (the Phase 23 check): install the .deb, sign in to Claude Code, run
  one Development goal with the same approvals as on Windows, restart the PC, and see that your
  keys are still saved. Tell Claude what you find; fixes go into the next version.
• Record the sign-in answers on Linux: each AI tool's real sign-in answers, the way they were
  recorded on Windows, so Plenipo reads them right on Linux too.
• On Windows, install this update as usual. Plenipo offers it by itself, or you can download it
  here.

Good to know

• Computer use works on X11, not yet on Wayland. Ubuntu starts in Wayland. To use computer
  use, click the gear button when you sign in and choose "Ubuntu on Xorg". Under Wayland, Plenipo
  says so plainly and never takes a picture of part of the screen (ADR-154, computer use on
  Linux). Wayland support comes in Wave 4.
• Start when you sign in works on Linux too. It starts Plenipo in the tray, or with its window
  open where there is no tray.
• Linux has no signing like Windows'. The .deb names 8 West Ventures, LLC as its maker, the
  AppImage's updates carry 8 West's updater signature, and GitHub shows each file's SHA-256
  checksum on this page.
• Every release now checks its Linux files before publishing: the .deb installs, Plenipo and
  the AppImage start and keep running, and removing the .deb leaves your own data alone.
• The plan, every decision, and what is left are in the
  Phase 23 checklist.

v1.22.0 — Community, the people part

This release brings Community's people part (Phase 24, part 24C): your profile, finding people,
private sealed messages, Block and Report, and rewards for taking part. Community is not open
yet: 8 West opens it later, with no new download needed then (ADR-170). Nothing is sent to 8 West
until you turn Community on yourself. Plenipo by 8 West Ventures, LLC.

Highlights

• Turn on Community in Settings → Switches. You sign in to your 8 West account with a short
  code on the account site; Plenipo never sees your password. You choose your name in Community
  (like @frank-g) and give your birth month and year once. Community is for people 13 and older.
• Your profile, and What people see. Your card shows your picture, status, mood, and message
  from your tile, and your name, company, what your business does, and your state or country, each
  with its own box. Do not disturb shows to others as Busy. Appear offline sits in
  Settings → Community and beside your status at the top.
• Find people. A new Community section on the left (only while Community is on) has the
  directory, New this week, Find someone by name, Invite by email, and Share my
  profile, a link and a picture code (QR code) for a business card.
• Private messages, sealed. Each message is sealed on your computer for the other person's
  computers, so 8 West sees only who and when, never the words. A first message is a request until
  the other person accepts it. Check the safety code to be sure no one is in the middle.
  Reactions, Reply, Delete for me, and Give to a worker (a worker gets the words as
  outside information, never as orders).
• Block and Report. Block works everywhere at once, and the person isn't told. A report carries
  only what you tick, with proof the words are real. Delete my Community data from this PC
  removes your conversations here in one step.
• Points and the leaderboard. Points for helping (never for sending messages), badges like
  Founding member, a leaderboard for this week and all time, and Getting started.

For you, the owner

• Install this update on your PC. Plenipo offers it by itself (it checks GitHub once a day), or
  you can download it from this release.
• Community stays closed until you switch the people part on for everyone from the account
  service's admin page, after the attorney approves the Community terms and the security review
  passes (ADR-171).
• Until the account service is updated for this release, pressing Turn on Community says
  "Community can't be reached right now. Nothing was changed." Nothing about you is sent. Once it
  is updated, the switch says Coming soon until you open Community. The account service's
  changes are listed in docs/phases/phase-24-account-service-changes.md.

Good to know

• Messages stay on your computer in Plenipo's record, in its backups and exports, and never
  in Activity. Activity notes that a conversation started or someone was blocked, never the words.
• Members under 18 are never in the directory or on the leaderboard, adults never see their
  status or mood, and an adult's first message always waits in their Requests.
• Not yet: GIFs (until the GIF library is chosen), stickers, linked organizations (part 24D),
  and collaborators (part 24E).
• The plan, every decision, and what is left are in the
  Phase 24 checklist. Leave this conversation deletes it
  from this PC only (ADR-173); the other person keeps their copy.

v1.21.0 — Mac and Linux: the shared base is ready

This release finishes the groundwork for Plenipo on a Mac and Linux (Phase 23, Wave 1). There
is still no Mac or Linux download: Linux comes next, then the Mac. On Windows you will notice three
small changes in wording, and Guard is a little stricter. Plenipo by 8 West Ventures, LLC.

Highlights

• Each system speaks its own words. On a Mac, Plenipo will say "this Mac", "the menu bar", and
  "your Mac's Keychain", and show shortcuts as ⌘S; on Linux, "this computer" and "your file
  manager" (ADR-155). Windows keeps its words.
• The terminal on a Mac and Linux offers your own shell, zsh, bash, and fish, and closing a
  terminal ends the programs started in it, as on Windows.
• Guard's safety review for a Mac and Linux found six things and fixed all of them
  (the review):
  • On a Mac and Linux, Stop now stops everything a worker started, even a program that stepped
    out of the worker's group (ADR-158, a program that leaves its group still ends with its work).
  • More of a Mac's and Linux's own tools are blocked, such as ones that type for you, take a
    picture of the screen, or read the clipboard.
  • Plenipo checks a file's path again right before it reads or writes the file.
• Updates know which system they are on, and only one Plenipo runs at a time on every system.

For you, the owner

• Install this update on your PC. Plenipo offers it by itself (it checks GitHub once a day), or
  you can download it from this release.
• Nothing to check by hand for this one: Windows works as before.

Good to know

• Three sentences read a little differently on Windows: "Pop-up notices from Windows wait
  while this is on…" (Do not disturb), "Set the right date and time on this PC" (License), and
  "This PC stays in charge" (Devices).
• "Open in another program" refuses a few more kinds of files, whatever system you are on:
  Ruby, PHP, and Lua scripts, and installer and disk files such as .bin, .deb, and .dmg. They
  open in Plenipo instead.
• New installs block more risky programs, most of which only exist on a Mac or Linux. Your
  own lists do not change.
• On every system, a copy or move into a folder that is really a link leading outside the
  project counts as outside, so it asks you first.
• The plan, every decision, and what is left are in the
  Phase 23 checklist. Community (Phase 24) is being built beside
  it (ADR-160).

v1.20.0 — Getting ready for Mac and Linux

This release starts Phase 23, Plenipo for Mac and Linux. There is no Mac or Linux download yet:
this is the groundwork underneath, built and tested on all three systems. On Windows you will
notice almost nothing, and a few fixes make Plenipo steadier everywhere. Plenipo by 8 West
Ventures, LLC.

Highlights

• Plenipo is now built and tested on a Mac for every change, as it already was on Windows and
  Linux. Trial Mac and Linux downloads were built too, to check what they will look like.
• Guard is ready for a Mac and Linux. When Plenipo cannot check which program is asking to use
  a worker's tools, it now says no (ADR-156). On a Mac it can now check. Plenipo never runs a
  terminal or its browser as the Mac's or Linux's all-powerful user (root). And on a Mac and Linux,
  where Deploy and deploy can be two different programs, an approval names a program exactly.
• On a Mac and Linux, a worker's programs stop when Plenipo does, even if Plenipo crashes. A
  small helper, the keeper, makes sure of it (ADR-157). Windows always did this.
• On Linux, saved keys survive a restart. They now live in the desktop's own password store,
  GNOME Keyring or KWallet (ADR-153).
• On a Mac and Linux, Plenipo finds AI tools installed with Homebrew, npm, nvm, Volta, and the
  like, even when it is opened from the Dock or a menu.

For you, the owner

• Install this update on your PC. Plenipo offers it by itself (it checks GitHub once a day), or
  you can download it from this release.
• Nothing to check by hand for this one: Windows works as before.

Good to know

• Fixes for everyone: Plenipo could lose track of a finished program whose output closed
  slowly, so the program was never marked finished. And a program found through PATH is now
  counted as the project's own file (which never gets a saved secret) whenever its real location,
  after shortcuts and links, is inside the project.
• New installs block a few more risky programs that only exist on a Mac or Linux, such as
  AppleScript (osascript) and the Mac's Keychain tool (security). Your own lists do not change.
• Activity says it plainly when Plenipo refused a tool call because it could not check which
  program sent it.
• The plan, every decision, and what is left are in the
  Phase 23 checklist. Community (Phase 24) is being built beside
  it (ADR-160).

v1.19.4 — Plenipo on your phone is on

Plenipo on your phone works now. 8 West's relay is running at relay.getplenipo.com, and it
was checked from outside before this release. So the switch that said Coming soon now says
Use Plenipo from another device, and you can add your phone. Plenipo by 8 West Ventures,
LLC.

Highlights

• Turn it on. On your PC, open Settings → Switches → Use Plenipo from another device. Then
  open Settings → Devices → Add a phone. Your PC shows a picture code (QR code) and a typed
  code. Scan it with your phone's camera, and your phone opens Plenipo's page at
  remote.getplenipo.com. Your phone signs in with its face, fingerprint, or passcode.
• What your phone can do. Read every page, answer approvals, stop or allow work, give an
  objective, and get a notice when something needs you, even when the page is closed.
• Sealed end to end. Every message between your phone and your PC is sealed before it leaves.
  The relay in the middle passes it along and cannot read or change it. Your PC stays in charge:
  Guard decides every request, and Activity shows each one with the phone that sent it.
• Part of Pro. Phone access needs Pro. On Free, the switch says Part of Pro.

For you, the owner

• Install this update on your PC. Plenipo offers it by itself (it checks GitHub once a day), or
  you can download it from this release.
• Then try it on a real phone, the checks only you can do: pair an iPhone from its Home Screen
  page and an Android phone from Chrome, sign in, approve and refuse something, and turn on notices
  on each. The list is in the
  Phase 14 acceptance report.

Good to know

• One small fix in the relay. When it ends a connection (to turn away a phone that sends too
  fast, say), it now waits for the other side's goodbye before it hangs up, as the WebSocket
  standard asks. Before, hanging up early could make the computer reset the connection, and on
  Windows a reset could wipe out the relay's last message, the reason it ended.
• Nothing else changed in this release.
• The relay is Plenipo's own program, from this repository (ADR-149, Plenipo runs its own relay).
  8 West's server installs each new release's relay by itself.
• What Plenipo sends the relay, and what the relay can and cannot see, is in
  Free and Pro.