v2.1.0Autonomous Decisions & Agency Routing
November 3, 2026Distributed 1-Click Decision Cards, Universal Agent Context Gate & Dual-Homed Client + Agency Workspaces
End-to-end stakeholder decision routing from coding agents, Default-Unless-Vetoed advisory mode, 1-click custom counter-proposals, and dual-homed Client + Agency workspace delivery.
- Shipped Distributed 1-Click Decision Cards (`brg decide propose --to kate,doc`) with 72-hour single-use Magic Links delivered via Resend email and Slack.
- Added Advisory ('Default-Unless-Vetoed') vs. Blocking Decision Card modes so overnight coding runs can proceed with a recommended default while giving stakeholders a 1-click override.
- Added 1-Click Per-Option Quick-Vote URLs and Custom Counter-Proposals (`?custom=1`) on `/decide/guest`, with automatic decision resolution when an Approver votes.
- Upgraded `GET /api/v1/fleet/context` and `bridge init` so site-installed coding agents automatically receive the workspace `teamRoster` and the 4 Bridge agent skills.
- Shipped Dual-Homed Client + Agency Workspaces (`brg init --org <client> --agency-org <agency>`), multi-workspace keyring, automatic `WIN`/`HANDOFF` rollup mirroring, and `--internal` private escalation.
v2.0.0Commercial Readiness
November 1, 2026Buyer Trust Center, Self-Serve Export & Legal Surfaces
Comprehensive commercial readiness release delivering complete buyer transparency, RFC 9116 security policy, and programmatic tenant data lifecycle controls.
- Published production Buyer Trust Center covering Sub-processors, Data Lifecycle, AI Transparency, and Deletion.
- Shipped self-serve Data Export (GET /api/v1/organizations/export) providing complete JSON archives of tenant records.
- Shipped self-serve Workspace Deletion (DELETE /api/v1/organizations) enforcing permanent PostgreSQL cascading purge for Owners.
- Published RFC 9116 security.txt at /.well-known/security.txt with 24-hour security@xray.tech disclosure SLA.
- Launched honest /integrations matrix disclosing exact OAuth scopes, fields read, and fields discarded for all 13 connectors.
- Updated B2B Terms of Service, Privacy Policy, and system status dashboard.
v1.5.0Security & RLS
October 24, 2026PostgreSQL Row-Level Security & Per-Tenant HKDF Vault
Core security overhaul establishing kernel-level tenant isolation in PostgreSQL and envelope encryption for all external credentials.
- Enforced PostgreSQL 17 FORCE ROW LEVEL SECURITY across all 58 database models using app.current_org_id session variables.
- Transitioned all OAuth refresh tokens and API keys to per-tenant HKDF-SHA256 envelope encryption (hkdf_v1:).
- Restricted database runtime permissions to non-superuser bridge_app_rls role with NOBYPASSRLS.
- Deployed 1-Tap Clear and 1-Click Rollback hygiene snapshots for operational maintenance.
- Introduced zero-login executive email briefs with cryptographic authentication tokens.
v1.0.0Initial Release
October 10, 2026Stage-2 AI Judge & Multi-Rail Operational Lens
Initial launch of XRAY Bridge: bridging execution trackers (Jira, Linear, GitHub, Airtable) to executive visibility with zero raw transcript custody.
- Launched Stage-2 AI Verification Judge (gpt-4o-mini in strict JSON mode) with fail-closed human review staging.
- Introduced Derive-and-Discard custody (rawBufferTtlDays = 0) for Zoom, Fathom, Fireflies, and Google Meet.
- Built 1-Click Decisions with cryptographic guest voting links.
- Integrated outbound policy scanner for live API secret redaction and payment card masking.