What changed.

v0.1.18

29 October 2026

Every tool keeps its own walls.

• SAP, Salesforce, HubSpot, Zendesk and Ramp records are shown only to the people that tool already shows them to.
• Your own SQL database can feed the memory: read-only, with who sees each table's rows declared up front.
• Documents are read, not just listed: PDFs (scans too, with OCR on your own server), Office files and images from Drive, Microsoft 365, email and Confluence.
• Sealed fields, if you turn them on: chosen ERP fields stay encrypted in the database, and can be set to open only with the reader's own sign-in.
• The audit trail checks in every five minutes, so your SIEM notices within minutes if it goes quiet; events older than 90 days move to signed archives.

v0.1.17

21 October 2026

Your cloud, your identity provider, your vault.

• Installs into your own cloud in one step: AWS, Azure or GCP.
• SAP joins the sources (S/4HANA and ECC), and a work board shows who is working on what, agents included.
• Seats come from your identity provider: SAML single sign-on, SCIM provisioning and deprovisioning.
• Secrets stay in your vault (AWS, GCP, Azure or HashiCorp), and connector credentials are encrypted under your own key.
• Every answer carries its evidence chain: the discussion, the ticket, the pull request, the commit, the code.
• Agents connect over HTTP with OAuth, and Claude Code or Cursor get Mithrandir as a one-line plugin.

v0.1.16

25 September 2026

Agents arrive briefed.

• Every install ships the agent briefing, so an agent knows how to ask before its first question.
• A restricted detail is removed from an answer instead of the whole answer being refused.
• Finding the story behind a record is much faster.
• An idle install uses a fraction of the memory it used to.

v0.1.15

17 September 2026

Slack and email join the memory.

• Slack: the channels, threads and messages each person can already see become part of the company memory.
• Email: mailboxes join on a rolling 28-day window per inbox.
• Licences are seat-counted and verified offline, so an air-gapped install never calls home.
• Answer quality is now measured per record, not only per answer.

v0.1.13

8 September 2026

The whole company has a map.

• 125 types of thing and 69 kinds of relationship: customers, deals, contacts, campaigns, agreements, support tickets, email threads, hiring, billing.
• CRM and sales calls join the sources, with deal teams and who may see what.
• Agents act, not only read: GitHub and Linear actions from an agent, with a confirmation where it matters.
• Opt-in telemetry: numbers only, never content.

v0.1.12

25 August 2026

Google Workspace, and an install you run yourself.

• Google Workspace joins the sources: Drive, Docs, Sheets, Slides and Meet.
• A guided installer, updater and connector helper: install, upgrade and connect sources from one script.
• The image prints its own deploy files and runbook, and checks an upgrade before it runs.
• Every citation is deterministic: the same answer points at the same source every time.
• The public demo compares against a real multi-turn coding agent, not a strawman.

v0.1.10

19 August 2026

Answers show their sources inline.

• Every claim in an answer carries its own citation marker.
• Answers arrive in two phases: the sources first, then the answer.
• The public demo asks the same question with and without Mithrandir, side by side.

v0.1.8

17 August 2026

An audit trail nobody can edit.

• Every admin action is chained into a tamper-evident audit trail, streamed to your SIEM and verifiable without us.
• GDPR erasure and the audit chain agree: a person can be erased and the trail stays honest.
• Admin credentials are isolated from the application; emergency access needs a signed token.
• Secrets can come from your vault instead of the environment.

v0.1.6

15 August 2026

The first shipped build.

• Ships as one container, amd64 and arm64, with continuous sync built in.
• Agent conversations become memory: private by default, shared per conversation, and agents log their decisions as they work.
• Linear joins the sources: issues, comments, documents and projects, with team access mirrored.
• Code in Python, Java, JavaScript, TypeScript and Bash is understood by structure, not just text.
• Single sign-on for seats, admin seat and clearance management in the browser, every admin action audited.
• Bring your own model, including a self-hosted one.