What changed
Newest first. Service entries show the commit of the release that shipped them. Follow along with the Atom feed.
A website that shows its work
- A status page that separates what runs today from what is only designed, built from the same file as every page badge.
- Two live demos that run our real code in your browser: the Airlock X-Ray and the Agent Seal verifier.
- New pages: builder preview docs, a glossary, an FAQ and this changelog, with an Atom feed.
- Every page is now also published as Markdown for AI agents, and early access requests no longer need email.
Daily thread integrity sweep, and invisible text caught in more places
- Before each daily ledger anchor, every conversation thread active since the last sweep is re-verified. A broken thread is sealed and recorded even if nobody reads it again.
- The Airlock now removes Unicode tag characters ("ASCII smuggling": text a model can read but a person cannot see) and checks subject lines for invisible characters.
- Eleven red-team cases now assert exactly which detector fires for each attack.
Ledger integrity and key versioning
- A broken hash chain is detected, sealed and recorded, and freezes the affected record until a person repairs it. A broken chain is never anchored.
- Encryption keys are versioned, so stored mail can move to a new key without being re-encrypted.
The quarantined reader
- A reader with no tools turns each message into a structured case. It can only raise attention, never lower it, and fails closed to a person.
- Card, bank account and US Social Security numbers are redacted before anything is read.
- It runs on a no-cost synthetic stand-in in staging. No real model is switched on.
Website launch and release gates
- envoltmail.com went live.
- Every release now passes an outbound-traffic allowlist, a log canary sweep and a recorded vendor-access procedure.
The staging pipeline
- Encrypted quarantine for raw mail, a hash-chained ledger anchored daily, and conversation threads with ordered, fenced writes.
- Agent Seal verification for incoming agent mail, and trust tiers for every sender.
- Isolation canaries in every release: separate synthetic test customers that must never see each other's data.