Skip to content
// changelog

What is new

A running log of platform milestones. We ship continuously and document the changes that matter.

Security hardening: adversarial bug hunt + billing-safety fixes

SecurityBilling
  • Isolated the Python sandbox per run, closing a critical cross-tenant secret-leak path in the shared interpreter.
  • Enforced workspace identity on Slack event triggers so an event can no longer fire against the wrong tenant.
  • Serialized Stripe credit fulfillment so a redelivered webhook can't double-credit an account.
  • Closed a concurrent-run race that could let simultaneous runs blow past an org's monthly spend cap, and made credential writes atomic with their audit-log entry.
  • Public agent runs now fail closed (reject) instead of silently allowing extra spend if Redis is unavailable.

Connector expansion, guardrails, and a friendlier builder for non-technical users

ConnectorsGuardrailsUX
  • Added 10 more clean-room connectors (Cal.com, Attio, Paddle, Lemon Squeezy, beehiiv, Loops, Plausible, Render, PandaDoc, Baserow), bringing the authored catalog to 86.
  • Added opt-in guardrails: tool allow/deny lists, api_call domain allow/deny, and a heuristic prompt-injection input scan.
  • Launched a public template gallery at /use-cases.
  • Every connector now shows a plain-language "how to get your API key" guide in the builder chat, voice mode, and the connect page.
  • Fixed the builder chat bubble briefly showing raw JSON while an AI reply streamed in.

Legal entity, enterprise contracts, and blog RSS

LegalBlog
  • Named the legal entity (NoDowntime Technologies FZCO) across Terms, Privacy, and the footer, with UAE governing law.
  • Added Master Service Agreement and EULA pages for enterprise contracting.
  • Added a researcher Hall of Fame page.
  • Added a blog RSS feed and per-tag blog pages.

Docs site, help center, and deeper legal coverage

DocsLegal
  • Launched /docs with 21 articles across 7 categories, plus a /help support hub.
  • Expanded the Privacy Policy (legal basis, international transfers, data rights) and Terms (suspension, governing law).
  • Added Disclaimer and Responsible Disclosure pages, and turned security.txt into a real disclosure policy.
  • Fixed the dashboard greeting showing "Good morning" late at night.

Publish agents as MCP servers, a BYOK browser tool, and a builtin-tools fix

IntegrationsReliability
  • Agents can now be published as an MCP server and exposed as an A2A agent card.
  • Added a BYOK browser-automation tool (Stagehand) that runs on the customer's own Browserbase account.
  • Fixed 9 builtin tools (send_email, web_search, file read/write, Slack, GitHub, and more) that were silently no-op'ing in some templates while runs still reported success — they now execute for real or fail with an honest error.

Market-readiness push: connectors, live pickers, and voice v2

ConnectorsVoiceApprovals
  • Rewrote the connector engine: correct parameter handling, live credential testing at connect time, and honest OAuth states instead of fake "connected".
  • Added live dropdown pickers for Slack channels, GitHub repos, and Linear teams instead of free-text fields.
  • Closed an approve-then-fail race in human-in-the-loop approvals so a destructive action can't execute twice across a crash.
  • Shipped native Google OAuth (no more pasting tokens) and a faster, interruptible voice mode.

Marketplace agents and enterprise hardening

MarketplacePerformance
  • Added 16 curated, certified marketplace agent templates spanning all template categories (10 to 26 templates total), each forkable and built only from real, preview-executable tools.
  • Added missing database indexes and capped background-worker sweeps to cut CPU load under concurrency.
  • Closed a cross-org event-trigger firing gap and added toast notifications so mutations no longer fail silently.

Platform launch

Platform
  • Conversational agent builder with a live visual canvas.
  • Five trigger types, full execution history, and agent versioning.
  • Bring-your-own-cloud and managed deployment, with privacy-first monitoring.
  • Admin console and the first marketplace templates.
Changelog · RunAIAgents · RunAIAgents