Every shipment, on the record.
Combined timeline across the Actor family. For just one product's history, follow the links below.
2026-05-23
Reference
StrategyADR-018 through ADR-025 + strategy refresh.
Strategy documentation refreshed with a shipped-status snapshot (R0055-R0064) and 8 new architecture decision records documenting the load-bearing emerging-tech choices: Zod 4 as single source of truth, W3C DID Web Method, SPIFFE 1.0 for workload identity, AP2 VC mandates, MCP Apps ui.iframe on a separate origin, C2PA 2.1 + COSE_Sign1, JCS canonicalisation, ACTIONS_EXCLUDED_FROM_DISABLE safety floor. ADR total: 17 → 25.
- ADR-018 Zod 4 z.toJSONSchema() · ADR-019 W3C DID Web · ADR-020 SPIFFE vs mTLS
- ADR-021 AP2 VC mandates · ADR-022 MCP Apps separate origin · ADR-023 C2PA + COSE_Sign1
- ADR-024 JCS canonicalisation (RFC 8785) · ADR-025 ACTIONS_EXCLUDED_FROM_DISABLE floor
- agentic-api-implementation-plan.md shipped-status snapshot table
2026-05-23
Posture
Audit policyCustomer-first data access codified. No standing operator access.
Two new audit policies — 37 (Customer-First Data Access) and 38 (Fraud Detection + Legal Override) — codify that no Trustvice operator holds standing access to any customer workspace or log. Every read follows the customer's explicit grant or runs under a three-party WebAuthn-asserted legal-override ceremony (CISO + General Counsel + CEO) with documented external trigger and post-hoc notification. Audit-policy count: 36 → 38.
- /app/account/support-access — customer-initiated grants + approve/restrict/deny pending admin requests + one-shot log-access requests + grants history + legal-override history
- /app/account/fraud-status — every fraud signal raised by external providers visible to the customer + per-signal dispute path
- R0042 shadow-mode reframed: PREFLIGHT_BYPASS_REASONS now empty
- Three-party legal-override ceremony with append-only audit record
- Annual transparency report aggregation by trigger × jurisdiction
- @trustvice/contracts 0.1.30 — 3 new modules + 21 new audit event types
- 3 new wiring docs for the Worker codebase (fraud connectors + customer-first enforcement + override ceremony)
2026-05-23
Platform
Marketing + polish/security customer-first section + /agentic-api authenticate panel + /referrals + /sub-processors pages + L1-L6 SVG + multi-language code tabs.
Platform cluster — every R0065 surface is now also externally visible. /security gains three new sections (customer-first data access · industry-standard fraud detection · customer-controlled authentication). Homepage gets a 'Your data is yours' callout. /agentic-api adds an Authenticate panel + an SVG L1-L6 stack diagram + curl/Python/Node/Go code tabs. /referrals + /sub-processors marketing pages ship. Well-known files grow 38 → 41 with fraud-providers.json + sub-processors.json + data-access-providers.json. Sub-processor inventory in /legal expanded with Resend + DigiCert + 7 fraud-detection providers. supportAccess + fraudStatus i18n namespaces translated across DE/DE-DU/ES/FR/ZH.
- /security#customer-first — Path A (customer-approved) vs Path B (legal-override ceremony)
- /security#fraud-detection — 7-provider envelope-only disclosure + dispute SLA
- /security#auth — WebAuthn passkeys + enumerable sessions + recovery codes
- Homepage `Your data is yours` callout · 4 stat tiles · 6-locale i18n
- /agentic-api Authenticate section (PAT · OAuth+DPoP · DID-Web+JWT-VC · workspace keys)
- /agentic-api L1-L6 stack diagram (SVG + sr-only fallback)
- /agentic-api multi-language code tabs (curl · Python · Node · Go · MCP SDK · A2A JSON)
- /referrals + /sub-processors + /[locale]/agentic-api new pages
- 41 well-known discovery files (was 38)
- /legal sub-processor list extended with Resend + DigiCert + Sift + Castle + Sardine + Persona + MaxMind + IPQualityScore
2026-05-22
Posture
Audit policy4 new audit policies + 2 extended for the emerging-tech surface.
Policies 33 (Agent Identity + Federation), 34 (AI Mandate Lifecycle), 35 (Content Provenance — C2PA), 36 (Workload Identity — SPIFFE) added. Policy 27 (PKI) extended with §5b (DID Web rotation ceremony) + §5c (RFC 3161 TSA pinning). Policy 31 (Kill-switch) §4.3 floor for agent-identity. Contracts 0.1.29 promotes 3 agent.* actions into ACTIONS_EXCLUDED_FROM_DISABLE. Audit policy count: 32 → 36.
- Agent Identity policy · 3 identity tiers · annual rotation ceremony · 4-eyes for Tier-A
- AI Mandate policy · AP2 VC lifecycle · spend/invocation budgets · revocation
- Content Provenance policy · C2PA 2.1 · COSE_Sign1 · deterministic CBOR · DigiCert TSA
- Workload Identity policy · SPIFFE 1.0 · X.509-SVID + JWT-SVID · federation
2026-05-22
Posture
Marketing/agentic-api. The public-facing agentic-stack surface.
New /agentic-api marketing page (~360 lines) externalises the 251-action / 18-domain / 10-transport / 38-well-known agentic-API stack with verbatim W3C / IETF / SPIFFE / AP2 / MCP / C2PA spec citations. /security extended with an Agentic API · identity stack section. Homepage gets a dark-section callout. Header nav gains 'Agentic API'.
- /agentic-api — L1-L6 stack · 18-domain catalogue · 10-transport surfaces · 5 emerging-tech panels · audit posture
- /security#agentic-identity — DID Web + SPIFFE + AP2 + MCP Apps + C2PA in security-page voice
- Header nav 'Agentic API' between API and Security
2026-05-15
v2 · 0.1
Early accessv2.spotv2.spot opens early access.
The fleet's actor opens early access for organisations running coordinated multi-agent systems. Ensemble, Quorum, and Chronicle surfaces produce cross-agent records that no per-agent log can produce.
- Ensemble surface · per-goal cross-agent dossier
- Quorum surface · inter-agent disagreement on record
- Chronicle surface · content-addressed provenance + deterministic fleet replay
- Read-only MCP / A2A / ACP protocol ingest
- Available on Scale plan and above
2026-05-15
v0 · 0.1
Public previewv0.spotv0.spot enters public preview.
The developer's actor opens as a free, local-first OpenClaw plugin. Three surfaces — Trace, Diff, Replay — produce engineer-grade insight into the iteration loop. No account, no cloud, no telemetry.
- OpenClaw plugin available on ClawHub as @trustvice/v0.spot
- Local SQLite + DuckDB store at ./.trustvice/v0/
- Web UI served at localhost:7414, no network calls
- .replay fixture format frozen at v0.1 — gzipped JSONL, ~50KB typical
- CI integration via openclaw v0.spot replay with --assert-reasoning-match
2026-05-15
Family
MilestoneThe Actor family · v0 → v1 → v2.
Trustvice ships as a three-product family. v0.spot for building, v1.spot for shipping, v2.spot for scaling. Same plugin, three modes, three units of observation.
- /actors — new overview surface for the three-version arc
- /pricing — five tiers from Free to Scale, plus Enterprise
- Run packs available as one-time purchases (1k / 10k / 100k / 1M)
- Auto top-up with opt-in trigger and hard monthly USD cap
- Sub-processor list moved to Cloudflare-native stack (D1 + R2 + Workers)
2026-05-12
v1.0
GAv1.spotv1.spot is generally available.
Public beta closes. All three surfaces — Witness, Council, Historian — are GA on the OpenClaw plugin. Pricing live. Article 12 evidence pack format frozen at v1.
- Witness · v1 schema frozen, signed exports
- Council · user preference model with rule-set v1
- Historian · branch retention up to 180 days on Scale tier
- Annex IV companion document generation
- Regional data residency confirmed (Cloudflare D1 US and EU jurisdictions)
2026-04-21
v0.9.4
Betav1.spotHash-linked ledger; signed exports.
Every record now chains the previous SHA-256. Exports are signed with a per-workspace key. Tamper detection is built in.
- SHA-256 entry chaining
- Per-workspace signing keys
- Signed export bundle format (.tar.gz with detached signature)
- Verification CLI: openclaw v1.spot verify <export>
Trustvice 360