The OWASP starter policy pack now maps to the OWASP Top 10 for Agentic Applications 2026 (ASI01-ASI10), with the LLM Top 10 and Threats & Mitigations lineage retained where it fits. Three new rules: agent-version pinning (ASI04), per-agent attribution (ASI07/ASI10), and a code-execution approval template (ASI05). ASI08 and ASI09 are runtime/organizational risks a record policy cannot assert; the pack's note says so.
Also in this release: the demo's email gate shows a demo-mode hint for cold visitors, and the demo agent carries a version field.
Architectural boundaries are now documented in LIMITS.md.