What changed, in plain language, with release evidence. https://envoltmail.com/changelog 2026-10-02T00:00:00Z VaultSpark Studios https://envoltmail.com/changelog#2026-10-02-a-website-that-shows-its-work 2026-10-02T00:00:00Z <ul><li>A status page that separates what runs today from what is only designed, built from the same file as every page badge.</li><li>Two live demos that run our real code in your browser: the Airlock X-Ray and the Agent Seal verifier.</li><li>New pages: builder preview docs, a glossary, an FAQ and this changelog, with an Atom feed.</li><li>Every page is now also published as Markdown for AI agents, and early access requests no longer need email.</li></ul> https://envoltmail.com/changelog#2026-10-02-daily-thread-integrity-sweep-and-invisible-text-caught-in-mo 2026-10-02T00:00:00Z <ul><li>Before each daily ledger anchor, every conversation thread active since the last sweep is re-verified. A broken thread is sealed and recorded even if nobody reads it again.</li><li>The Airlock now removes Unicode tag characters (&quot;ASCII smuggling&quot;: text a model can read but a person cannot see) and checks subject lines for invisible characters.</li><li>Eleven red-team cases now assert exactly which detector fires for each attack.</li></ul> https://envoltmail.com/changelog#2026-10-01-ledger-integrity-and-key-versioning 2026-10-01T00:00:00Z <ul><li>A broken hash chain is detected, sealed and recorded, and freezes the affected record until a person repairs it. A broken chain is never anchored.</li><li>Encryption keys are versioned, so stored mail can move to a new key without being re-encrypted.</li></ul> https://envoltmail.com/changelog#2026-10-01-the-quarantined-reader 2026-10-01T00:00:00Z <ul><li>A reader with no tools turns each message into a structured case. It can only raise attention, never lower it, and fails closed to a person.</li><li>Card, bank account and US Social Security numbers are redacted before anything is read.</li><li>It runs on a no-cost synthetic stand-in in staging. No real model is switched on.</li></ul> https://envoltmail.com/changelog#2026-10-01-website-launch-and-release-gates 2026-10-01T00:00:00Z <ul><li>envoltmail.com went live.</li><li>Every release now passes an outbound-traffic allowlist, a log canary sweep and a recorded vendor-access procedure.</li></ul> https://envoltmail.com/changelog#2026-09-30-the-staging-pipeline 2026-09-30T00:00:00Z <ul><li>Encrypted quarantine for raw mail, a hash-chained ledger anchored daily, and conversation threads with ordered, fenced writes.</li><li>Agent Seal verification for incoming agent mail, and trust tiers for every sender.</li><li>Isolation canaries in every release: separate synthetic test customers that must never see each other's data.</li></ul>