Changelog # What changed Newest first. Service entries show the commit of the release that shipped them. Follow along with the [Atom feed](https://envoltmail.com/changelog.xml). 1. October 2, 2026Website ## A website that shows its work - A status page that separates what runs today from what is only designed, built from the same file as every page badge. - Two live demos that run our real code in your browser: the Airlock X-Ray and the Agent Seal verifier. - New pages: builder preview docs, a glossary, an FAQ and this changelog, with an Atom feed. - Every page is now also published as Markdown for AI agents, and early access requests no longer need email. 2. October 2, 2026Service`7b75d6968172` ## Daily thread integrity sweep, and invisible text caught in more places - Before each daily ledger anchor, every conversation thread active since the last sweep is re-verified. A broken thread is sealed and recorded even if nobody reads it again. - The Airlock now removes Unicode tag characters ("ASCII smuggling": text a model can read but a person cannot see) and checks subject lines for invisible characters. - Eleven red-team cases now assert exactly which detector fires for each attack. 3. October 1, 2026Service`caa3abce904c` ## Ledger integrity and key versioning - A broken hash chain is detected, sealed and recorded, and freezes the affected record until a person repairs it. A broken chain is never anchored. - Encryption keys are versioned, so stored mail can move to a new key without being re-encrypted. 4. October 1, 2026Service`3946ac9dab26` ## The quarantined reader - A reader with no tools turns each message into a structured case. It can only raise attention, never lower it, and fails closed to a person. - Card, bank account and US Social Security numbers are redacted before anything is read. - It runs on a no-cost synthetic stand-in in staging. No real model is switched on. 5. October 1, 2026Service`54102f60371e` ## Website launch and release gates - envoltmail.com went live. - Every release now passes an outbound-traffic allowlist, a log canary sweep and a recorded vendor-access procedure. 6. September 30, 2026Service`e6761637b092` ## The staging pipeline - Encrypted quarantine for raw mail, a hash-chained ledger anchored daily, and conversation threads with ordered, fenced writes. - Agent Seal verification for incoming agent mail, and trust tiers for every sender. - Isolation canaries in every release: separate synthetic test customers that must never see each other's data.