Changelog
What changed, when, and what it means for an integration. Newest first. Package versions are on Versions.
October 2026
- 26 Oct — Docs: Quick Start split into a ten-minute sandbox path and a production path, with curl, Python and TypeScript; new pages Receipt, Latency and failure, Where Regent sits, Status; REST examples no longer swallow their placeholders; Agentcard codes in the error reference.
- 25 Oct — Medium-risk escalation asks a person only on money actions; a read-only tool at medium risk no longer waits for approval. Hard stop at high risk unchanged.
- 25 Oct — Approval card: when a payment waits for the owner, MCP apps that support it (Claude Desktop) show the request as a card in the chat, open the owner’s approval page and continue once it is approved.
- 24 Oct — Agentcard orders settle from Agentcard’s own order events: a paused order keeps its hold, a placed order keeps its hold until confirmed, a confirmed order settles the charged amount; receipts carry
settlement_source: provider. The agent’s own report on this rail is recorded, not trusted. - 22 Oct — Biometric step-up on approvals (
approval.biometric_above,approval.biometric = "always"),approval_method: passkey+authid; the approver’s identity standing is re-read at approval time. - 21 Oct — Verifiers 0.7.0:
settlement_refandsettlement_networkin receipts (a chain transaction hash with its chain, a PSP charge id). - 20 Oct — Budget windows roll in the organization’s clock (
timezoneon the mandate); the Stripe operations map (amount source and counterparty per path); minor units follow the currency’s decimals. - 19 Oct — Agent identity moved to
did:webvh(log at/agents/{id}/did.jsonl; legacy identifiers still resolve). For agents: one page an agent reads to connect itself. The Cloud Gateway is listed in the official MCP registry. - 18 Oct — Agentcard rail: an agent shops at US merchants with the owner’s own card, Regent deciding on the cart total before the confirm.
- 15 Oct — Caps per seller (
entity_limits, terms-v4); an agent may ask the owner for a budget from inside the chat (request_budget); enrolment with a bearer credential for agents without a key store; the ask ceiling (ASK_TOO_LARGE). - 14 Oct — One currency per mandate; sandbox budgets by currency; the purchase currency is read from the rail. Which door is yours.
- 13 Oct — Enrol an agent with its own key (
regent-control enroll); plain HTTP with a credential bound to one agent; connectors for Claude.ai and Claude Code. - 12 Oct — OAuth for connectors: a connector sign-in yields a one-hour credential bound to one agent.
- 11 Oct — Self-serve signup lands in a sandbox (test rail, no identity check); the consent screen creates agent, mandate and credential in one passkey gesture.
- 06 Oct — Budget envelopes on AAuth protocol -11 (
regent-httpsig0.7);regent-control0.3.0 installs enforcement hooks for Claude Code, Codex and Hermes. - 05 Oct — Settlement confirmation: the counterparty signs what settled and the receipt embeds it (
settlement_source: counterparty). Passkeys: mandates and escalations are approved by a signature over the terms (approval_method,approval_digest). - 04 Oct — Audit chain with epochs and Bitcoin timestamps;
regent-controlon PyPI;@regent-protocol/control-sdkon npm; all schemas under migration control.
September 2026
- 22 Sep — Policy snapshot in every token and receipt (
policy_version,policy_hash,policy_source,risk_model). AP2 v0.2 mandate chains per money decision. Decision codesVELOCITY_EXCEEDEDandDUPLICATE_REQUEST. - 21 Sep — Receipts filed into the organization’s anchored audit trail; retention ten years.
- 18 Sep — Mandate versions: terms committed by hash in every token and receipt, revealed by the owner on demand.
- 08 Sep — Revocation endpoint and drain rule for budget tokens (
regent-httpsig0.6.0). - 01 Sep — Budget refusals carry
required; streaming cost mode; usage endpoint; published test vectors.
August 2026
- 21 Aug — First production AAuth Budgets implementation at get4agent.com.
- 14 Aug — RFC 9421 request signatures verified at the gate; egress signing from the gateway.