Changelog

What changed, by date.

3 October 2026. Revoking a pass reaches every verifier within a minute. A mandate that widens on a paid plan needs two signatures, and the dashboard's signing screen shows exactly what is signed before anyone signs it. An approver works through a queue of mandates waiting on a decision. The record screen in the dashboard pages, filters by month and exports what it finds.

24 September 2026. Issuing a pass shows its private key once, and never again. A gate call answers with a decision and a receipt, and the record keeps it beside every x402 settlement. The SDK signs every call with the agent's own key, and the command line issues a pass, sets a mandate and reads the record.

23 September 2026. The OpenAPI document settles three shapes ahead of the routes that serve them. Registering an organisation needs no API key. The record has one shape: /spend is an alias of /record for one version, with the same month filter and the same entries. Every response declares its rate limit, and every 429 says how long to wait.

15 September 2026. The repository, the contract and the three-calls documentation.