ResourcesChangelog

Changelog

What changed, when, and what it means for an integration. Newest first. Package versions are on Versions.

October 2026

  • 26 Oct — Docs: Quick Start split into a ten-minute sandbox path and a production path, with curl, Python and TypeScript; new pages Receipt, Latency and failure, Where Regent sits, Status; REST examples no longer swallow their placeholders; Agentcard codes in the error reference.
  • 25 Oct — Medium-risk escalation asks a person only on money actions; a read-only tool at medium risk no longer waits for approval. Hard stop at high risk unchanged.
  • 25 Oct — Approval card: when a payment waits for the owner, MCP apps that support it (Claude Desktop) show the request as a card in the chat, open the owner’s approval page and continue once it is approved.
  • 24 Oct — Agentcard orders settle from Agentcard’s own order events: a paused order keeps its hold, a placed order keeps its hold until confirmed, a confirmed order settles the charged amount; receipts carry settlement_source: provider. The agent’s own report on this rail is recorded, not trusted.
  • 22 Oct — Biometric step-up on approvals (approval.biometric_above, approval.biometric = "always"), approval_method: passkey+authid; the approver’s identity standing is re-read at approval time.
  • 21 Oct — Verifiers 0.7.0: settlement_ref and settlement_network in receipts (a chain transaction hash with its chain, a PSP charge id).
  • 20 Oct — Budget windows roll in the organization’s clock (timezone on the mandate); the Stripe operations map (amount source and counterparty per path); minor units follow the currency’s decimals.
  • 19 Oct — Agent identity moved to did:webvh (log at /agents/{id}/did.jsonl; legacy identifiers still resolve). For agents: one page an agent reads to connect itself. The Cloud Gateway is listed in the official MCP registry.
  • 18 Oct — Agentcard rail: an agent shops at US merchants with the owner’s own card, Regent deciding on the cart total before the confirm.
  • 15 Oct — Caps per seller (entity_limits, terms-v4); an agent may ask the owner for a budget from inside the chat (request_budget); enrolment with a bearer credential for agents without a key store; the ask ceiling (ASK_TOO_LARGE).
  • 14 Oct — One currency per mandate; sandbox budgets by currency; the purchase currency is read from the rail. Which door is yours.
  • 13 Oct — Enrol an agent with its own key (regent-control enroll); plain HTTP with a credential bound to one agent; connectors for Claude.ai and Claude Code.
  • 12 Oct — OAuth for connectors: a connector sign-in yields a one-hour credential bound to one agent.
  • 11 Oct — Self-serve signup lands in a sandbox (test rail, no identity check); the consent screen creates agent, mandate and credential in one passkey gesture.
  • 06 Oct — Budget envelopes on AAuth protocol -11 (regent-httpsig 0.7); regent-control 0.3.0 installs enforcement hooks for Claude Code, Codex and Hermes.
  • 05 Oct — Settlement confirmation: the counterparty signs what settled and the receipt embeds it (settlement_source: counterparty). Passkeys: mandates and escalations are approved by a signature over the terms (approval_method, approval_digest).
  • 04 Oct — Audit chain with epochs and Bitcoin timestamps; regent-control on PyPI; @regent-protocol/control-sdk on npm; all schemas under migration control.

September 2026

  • 22 Sep — Policy snapshot in every token and receipt (policy_version, policy_hash, policy_source, risk_model). AP2 v0.2 mandate chains per money decision. Decision codes VELOCITY_EXCEEDED and DUPLICATE_REQUEST.
  • 21 Sep — Receipts filed into the organization’s anchored audit trail; retention ten years.
  • 18 Sep — Mandate versions: terms committed by hash in every token and receipt, revealed by the owner on demand.
  • 08 Sep — Revocation endpoint and drain rule for budget tokens (regent-httpsig 0.6.0).
  • 01 Sep — Budget refusals carry required; streaming cost mode; usage endpoint; published test vectors.

August 2026

  • 21 Aug — First production AAuth Budgets implementation at get4agent.com.
  • 14 Aug — RFC 9421 request signatures verified at the gate; egress signing from the gateway.