v2.4

What's new

2.4 is a major release introducing three new modules: the AI Trust Index for grading and tracking third-party AI apps, an AI Apps inventory for governing the AI tools your teams use, and Agent Control for governing what AI agents are allowed to do. It also adds the Governance Intelligence Workspace, custom fields, a deadline warning banner, Microsoft Entra ID single sign-on, Spanish language coverage, and a round of design system and test coverage improvements.

• AI Trust Index — browse a curated catalog of AI apps with letter-grade trust scores and per-domain breakdowns, track the apps you care about, and get a weekly digest of what changed
• AI Apps inventory — register the AI applications your teams use, with detail pages, an approval center, policy and model dependency mapping, and risk assessment templates; promote a discovered Shadow AI tool into a governed app
• Agent Control — govern AI agent behavior with tool-call approval and file-write content gating; captures tool results, builds an events timeline, and works with Claude Code and Cursor
• Custom fields — define your own fields to capture the data your organization needs
• Deadline warning banner — surface upcoming deadlines across the dashboard and tasks, with configurable thresholds and per-user snooze
• Microsoft Entra ID single sign-on — sign in with your organization's Azure AD (Entra ID) identity
• Unified chip component — a single chip primitive rolled out across the app
• Table skeleton loaders — consistent loading states extended to frameworks, approval workflows, AI Trust Center, AI apps, and more page groups
• Standardized empty states — consistent empty-state treatment for tasks, use cases, and other modules
• iconOnly and small button sizes — added to CustomizableButton, with continued migration of raw MUI buttons
• Accessibility improvements — interactive component fixes plus axe end-to-end checks
• API documentation unification — regenerated Swagger and endpoint references from the route layer, with a drift check in CI
• Spanish (es) language coverage — added across the UI and enforced in the i18n audit
• Test coverage expansion — frontend line coverage raised, MSW handler suite and backend integration tests bootstrapped, plus additional controller tests
• Security and stability fixes — separate token-refresh rate limiting from the brute-force limiter, guard null date format on the preferences page, and remove pre-set environment variables

What's Changed

• feat: Phase 0-1-2-3 — AI content tracking, approval gateway, multi-agent orchestration by @haJ1t in #3757
• Added model and model risks AI Agents by @HarshP4585 in #3816
• fix: remove production debug logs and fix OpenRouter experiment failures by @EfeAcar6431 in #3949
• Codebase enhancements and bug fixes by @MuhammadKhalilzadeh in #3962
• deps(backend): bump sanitize-html from 2.17.3 to 2.17.4 in /Servers by @dependabot[bot] in #3937
• refactor(project-view): migrate raw MUI Buttons to CustomizableButton in ProjectFrameworks by @Innagl in #3943
• refactor(plugins): migrate raw MUI Buttons to CustomizableButton in PluginManagement by @Innagl in #3945
• deps(backend): bump js-cookie from 3.0.5 to 3.0.7 in /Servers by @dependabot[bot] in #3946
• test(llm-evals): exhaustive zero-cost test suite + opt-in integration smoke by @EfeAcar6431 in #3951
• deps(backend): bump qs from 6.15.1 to 6.15.2 in /Servers by @dependabot[bot] in #3952
• docker(frontend): bump nginx from 1.31-alpine to 1.31.1-alpine in /Clients by @dependabot[bot] in #3953
• deps(eval): update pandas requirement from >=2.3.0 to >=3.0.3 in /EvaluationModule by @dependabot[bot] in #3955
• deps(eval): update deepeval requirement from >=4.0.0 to >=4.0.3 in /EvaluationModule by @dependabot[bot] in #3956
• deps(eval): update transformers requirement from >=5.8.1 to >=5.9.0 in /EvaluationModule by @dependabot[bot] in #3957
• deps(eval): update huggingface-hub requirement from >=1.15.0 to >=1.16.1 in /EvaluationModule by @dependabot[bot] in #3958
• fix(evals): normalize judge model shape so OpenRouter judges run by @EfeAcar6431 in #3972
• Add tasks AI Agents by @HarshP4585 in #3745
• deps(frontend): bump the frontend-minor-patch group in /Clients with 31 updates by @dependabot[bot] in #3961
• fix(client): apply size-specific dimensions to CustomizableButton by @Innagl in #3965
• fix(evals): align table headers with their centered body cells by @EfeAcar6431 in #3966
• refactor(evals): rename EvaluationTable to ExperimentTable + standardize structure by @EfeAcar6431 in #3967
• feat(evals): better default experiment names + editable name field by @EfeAcar6431 in #3968
• fix(evals): move Choose Dataset Format actions into modal footer by @EfeAcar6431 in #3973
• refactor(client): migrate requestor, model risk, and workflow modals to CustomizableButton by @Innagl in #3981
• Fixing package problems by @MuhammadKhalilzadeh in #3982
• Ignoring Graphify analysis files by @MuhammadKhalilzadeh in #3984
• chore(start-here): refresh What's new block with latest blog posts by @gorkem-bwl in #3983
• Rename Generic Handler Functions by @MuhammadKhalilzadeh in #3985
• Disable/Comment out Workflows and Skills on the Sidebar by @MuhammadKhalilzadeh in #3987
• Added custom fields by @HarshP4585 in #3988
• feat(button): add iconOnly mode to CustomizableButton by @Innagl in #3990
• Audit and Remove 65 Isolated Nodes (Orphaned Abstractions) by @MuhammadKhalilzadeh in #3992
• deps(eval): update anthropic requirement from >=0.100.0 to >=0.105.2 in /EvaluationModule by @dependabot[bot] in #3993
• deps(eval): update xai-sdk requirement from >=1.0.0 to >=1.15.0 in /EvaluationModule by @dependabot[bot] in #3994
• deps(eval): update datasets requirement from >=4.0.0 to >=4.8.5 in /EvaluationModule by @dependabot[bot] in #3995
• deps(eval): update openai requirement from >=2.37.0 to >=2.38.0 in /EvaluationModule by @dependabot[bot] in #3996
• deps(frontend): bump the frontend-minor-patch group in /Clients with 26 updates by @dependabot[bot] in #3998
• deps(backend): bump redis from 5.12.1 to 6.0.0 in /Servers by @dependabot[bot] in #4001
• deps(backend): bump ejs from 5.0.2 to 6.0.1 in /Servers by @dependabot[bot] in #4002
• deps(backend): bump http-proxy-middleware from 3.0.5 to 4.0.0 in /Servers by @dependabot[bot] in #4003
• Extract Composable Hooks from AddNewRiskForm by @MuhammadKhalilzadeh in #4004
• fix(dashboard): align chart and legend layout across dashboard cards by @Innagl in #4006
• Added ansible for installing and updating verifywise on server by @HarshP4585 in #4007
• refactor(drawers): migrate MUI Button to CustomizableButton in clause/annex drawers by @Innagl in #4010
• More integration tests by @MuhammadKhalilzadeh in #4008
• Enable Azure AD (Entra ID) SSO by @HarshP4585 in #3905
• chore(deps): bump the npm_and_yarn group across 2 directories with 1 update by @dependabot[bot] in #4012
• Add controller tests for high-priority untested modules by @DeboraSerra in #4031
• deps(eval): update mistralai requirement from >=2.4.2 to >=2.4.9 in /EvaluationModule by @dependabot[bot] in #4033
• deps(eval): update openai requirement from >=2.38.0 to >=2.41.0 in /EvaluationModule by @dependabot[bot] in #4034
• deps(eval): update scikit-learn requirement from >=1.7.0 to >=1.9.0 in /EvaluationModule by @dependabot[bot] in #4036
• deps(eval): update transformers requirement from >=5.9.0 to >=5.10.2 in /EvaluationModule by @dependabot[bot] in #4037
• deps(frontend): bump the frontend-minor-patch group in /Clients with 41 updates by @dependabot[bot] in #4039
• Governance Intelligence Workspace by @MuhammadKhalilzadeh in #4045
• Feat: Deadline Warning Banner by @Br0wnHammer in #4042
• feat(accessibility): improve interactive components and axe e2e checks by @Innagl in #4044
• refactor(i18n): remove 285 orphan keys from translation dictionary by @Innagl in #4049
• 4022 raise frontend line coverage from 24 to at least 50 by @DeboraSerra in #4050
• 4023 build an msw handler suite for frontend integration tests by @DeboraSerra in #4052
• Most informative module - Governance Intelligence Workspace by @MuhammadKhalilzadeh in #4055
• Feat: Unified Chip Component Migration by @Br0wnHammer in #4054
• 4025 bootstrap backend integration tests using the existing setup by @DeboraSerra in #4056
• feat(ui): unify table loading states with CustomizableSkeleton by @Innagl in #4059
• chore(deps): bump esbuild from 0.27.7 to removed in /docs/api-docs in the npm_and_yarn group across 1 directory by @dependabot[bot] in #4061
• 4027 create test factories seed helpers by @DeboraSerra in #4062
• Add Spanish (es) language to the UI by @gorkem-bwl in #4073
• Repair MCP gateway approval, guardrails, and audit gaps by @gorkem-bwl in #4078
• feat(ai-gateway): native tool-call governance (Bash hook, approval, file-write gating) by @gorkem-bwl in #4083
• AI apps inventory by @gorkem-bwl in #4082
• feat(ai-gateway): rename MCP Gateway section to Agent Control by @gorkem-bwl in #4084
• Enforce Spanish in the i18n audit by @gorkem-bwl in #4085
• deps(eval): update transformers requirement from >=5.10.2 to >=5.12.0 in /EvaluationModule by @dependabot[bot] in #4064
• deps(eval): update tqdm requirement from >=4.67.3 to >=4.68.2 in /EvaluationModule by @dependabot[bot] in #4065
• deps(frontend): bump tmp from 0.2.6 to 0.2.7 in /Clients by @dependabot[bot] in #4075
• Separate token-refresh rate limit from brute-force limiter by @gorkem-bwl in #4076
• Guard null date_format on the preferences page by @gorkem-bwl in #4077
• deps(eval): update sentence-transformers requirement from >=5.4.1 to >=5.5.1 in /EvaluationModule by @dependabot[bot] in #4066
• deps(eval): update textblob requirement from >=0.17.1 to >=0.20.0 in /EvaluationModule by @dependabot[bot] in #4067
• deps(frontend): bump react-plotly.js from 2.6.0 to 3.0.0 in /Clients by @dependabot[bot] in #4070
• Feat: Storage service by @Br0wnHammer in #4072
• feat(ai-gateway): standard tables and sidebar redesign for Agent Control by @gorkem-bwl in #4096
• feat(ui): extend CustomizableSkeleton loading to six more page groups by @Innagl in #4080
• docs(ai-gateway): Agent Control reference + CLAUDE.md links by @gorkem-bwl in #4086
• build(deps): bump the npm_and_yarn group across 1 directory with 2 updates by @dependabot[bot] in #4087
• docs(frontend): add Chip design-system showcase and component docs by @Innagl in #4098
• feat(ai-apps): standard model picker + add-from-modal policy mapping by @gorkem-bwl in #4101
• feat(ai-gateway): capture tool results + events timeline + invocation drawer by @gorkem-bwl in #4103
• fix(ai-gateway): Agent Control UI polish by @gorkem-bwl in #4104
• GIW Enhancements by @MuhammadKhalilzadeh in #4109
• Fix: Clean up project workflow by @Br0wnHammer in #4106
• deps(frontend): bump dompurify from 3.4.8 to 3.4.11 in /Clients by @dependabot[bot] in #4107
• feat(ui): add table skeleton loading to Use cases page by @Innagl in #4111
• Agent run correlation and developer docs for Agent Control by @gorkem-bwl in #4112
• Refresh Agent Control docs after run correlation merge by @gorkem-bwl in #4113
• Refactor: Any Type by @Br0wnHammer in #4105
• fix(auth): make API tokens revocable and validated against the database by @gorkem-bwl in #4122
• Backend task 2 by @HarshP4585 in #4125
• docs(developers): add Platform REST API article and refresh API keys guide by @gorkem-bwl in #4126
• docs(developers): add resource, integration and reporting guides; expand super admin by @gorkem-bwl in #4133
• Backend task 4 by @HarshP4585 in #4131
• Hp june 18 backend task 8 by @HarshP4585 in #4138
• Backend task 5 by @HarshP4585 in #4134
• chore(deps): bump undici from 7.25.0 to 7.28.0 in /GRSModule/ui/frontend in the npm_and_yarn group across 1 directory by @dependabot[bot] in #4116
• deps(frontend): bump undici from 7.26.0 to 7.28.0 in /Clients by @dependabot[bot] in #4118
• Backend task 10 by @HarshP4585 in #4142
• Backend task 9 by @HarshP4585 in #4141
• Backend task 3 by @HarshP4585 in #4144
• Backend task 1 by @HarshP4585 in #4120
• Replace Start here expert with Dr. Gorkem Cetin, CEO of VerifyWise by @gorkem-bwl in #4147
• fix(frontend): standardize empty states for tasks and use cases by @Innagl in #4128
• refactor(ai-apps): use CustomizableSkeleton for loading states by @Innagl in #4130
• docker(frontend): bump nginx from 1.31.1-alpine to 1.31.2-alpine in /Clients by @dependabot[bot] in #4155
• deps(eval): update transformers requirement from >=5.12.0 to >=5.12.1 in /EvaluationModule by @dependabot[bot] in #4157
• ci: bump actions/checkout from 6 to 7 by @dependabot[bot] in #4156
• deps(eval): update anthropic requirement from >=0.105.2 to >=0.111.0 in /EvaluationModule by @dependabot[bot] in #4160
• deps(eval): update pyyaml requirement from >=6.0.0 to >=6.0.3 in /EvaluationModule by @dependabot[bot] in #4161
• deps(frontend): bump the frontend-minor-patch group in /Clients with 37 updates by @dependabot[bot] in #4163
• deps(frontend): bump react-plotly.js from 3.0.0 to 4.0.0 in /Clients by @dependabot[bot] in #4164
• deps(frontend): bump @types/node from 25.9.2 to 26.0.0 in /Clients by @dependabot[bot] in #4165
• API Documentation Unification by @MuhammadKhalilzadeh in #4166
• AI Trust Index module by @gorkem-bwl in #4154
• Merge develop into master (June 22) by @HarshP4585 in #3954
• Remove pre-set env variables by @HarshP4585 in #4167
• Hide AI Agent dashboard tabs from end users by @gorkem-bwl in #4169
• Add v2.4 release entry to What's new by @gorkem-bwl in #4168
• Reorder app switcher sidebar modules by @gorkem-bwl in #4172
• Speed up frontend checks: cache npm, skip coverage on PRs by @gorkem-bwl in #4173
• Bump litellm SDK 1.83.7 to 1.89.3 by @gorkem-bwl in #4174
• feat(frontend): add CustomizableSkeleton loading to Frameworks, Approval Workflows, and AI Trust Center by @Innagl in #4171
• Hide AI Gateway Prompts feature behind a flag by @gorkem-bwl in #4176
• Bug fixes by @HarshP4585 in #4179
• Merge develop into master (June 24) by @HarshP4585 in #4180

New Contributors

• @haJ1t made their first contribution in #3757

Full Changelog: v2.3.5...v2.4