Release notes and engineering
One post per shipped capability, written from the commit record: what changed, why, how it works, and what it still does not do. Subscribe with the RSS feed.
- · dns · openapi · release notes
One DNS probe, three deleted routes and an OpenAPI document that covers every route
AgenID merged three drifting DNS probes into one, deleted a credential-holding write path, and now documents all 13 deployed routes in its OpenAPI file.
- · scenarios · content · release notes
How the scenario library is built, and what keeps it honest
How the /how-it-works scenarios are built as typed data, why every one plays with and without AgenID, and the tests that keep their disclosures in place.
- · security · rate limiting · release notes
Rate limiting every public write endpoint on agenid.com
Every POST route on agenid.com is now rate limited by an in-process floor plus a durable Postgres counter, and a wiring test fails CI on any new unbounded route.
- · key discovery · security · release notes
The registry half of two-path key discovery is live
The registry's key-discovery route is deployed, completing the registry half of two-path key discovery, with the security decision made on the raw request target.
- · dns · domain connect · release notes
Domain control evidence, and why AgenID holds no DNS write credentials
/verify/domain checks an _agenid TXT record and uses Domain Connect for one-click setup, so the operator authorizes the record and AgenID holds no DNS credentials.
- · badges · verification card · security
Trust presentation now fails closed
Badges and the Verification Card once rendered any unrecognized level as verified. One canonical module now maps levels and resolves everything else to neutral.
- · documentation · ci · release notes
Documentation you can test: checking the docs against production
check:docs verifies AgenID's documentation in CI and, with --live, checks documented endpoint claims against the production deployment rather than the source.
- · issuance · cryptography · release notes
Register an agent in your browser, with a key that never leaves the tab
/issue registers an AI agent in about a minute. The Ed25519 key is generated and used in your browser tab and never sent to AgenID. Here is how it works.
- · security · integrity · release notes
Removing fabricated verification from our own codebase
We found and removed code that asserted verification outcomes without computing them. What it did, what replaced it, and the tests that now enforce the standard.