Skip to content

v2.72.0 — safe-mode (AI-firewall control plane) + Flow tab

Choose a tag to compare

View all tags
@avelikiy avelikiy released this 13 Jun 11:05
v2.72.0
This tag was signed with the committer’s verified signature.
avelikiy Alex
SSH Key Fingerprint: nD9xQzAb/3YFTUEHwDpi26wMHeq89yGJsV5XW/FadYQ
Verified
Learn about vigilant mode.
741f398
This commit was signed with the committer’s verified signature.
avelikiy Alex
SSH Key Fingerprint: nD9xQzAb/3YFTUEHwDpi26wMHeq89yGJsV5XW/FadYQ
Verified
Learn about vigilant mode.

Safe mode — tenant-wide action-control switch

Per-tenant config.safeMode (default off) — restrict autopilots on anomaly/incident. An AI firewall controls what an agent does right now, not just who has access (docs/AI-FIREWALL.md).

  • gate-all — every new case forced to a human gate regardless of confidence (reversible volume still runs; nothing irreversible auto-runs); forced-to-gate written to the hash-chained audit.
  • halt — startRun throws; ingest + manual start return 503 Retry-After; pending cases stay parked.
  • Server: safeMode validated, admin/compliance-lead only, push alert on change. Console Ops: off/gate-all/halt control + persistent banner. Tests 44/44; verified live.

Flow tab + per-tenant parametric flow customization

The operator console gains a Flow tab (see the autopilot the signer signs inside of) + three parametric overrides (rename signer / skip optional steps / add a checkpoint), safety invariants re-validated by construction. (Shipped in this release.)

Assets 2
Loading