Skip to content
Sign inBook a call

Changelog

Changelog

What changed, dated the day it reached you. Security entries say what is protected now; they do not describe the problem that was fixed.

October 2026

  • ImprovementThe site now covers C-Series, managed machines, network membership and the AI agent security assessment. Hosts on the Privatae platform are no longer offered to new customers, so the capacity prices in earlier entries no longer apply.
  • FeatureEvery account's first GB of memory is now free for good, paying accounts included, and signing up needs no card. Memory past the first GB is $9 per GB a month, so 2 GB is $9 a month.
  • SecurityYour Host now takes a request as yours only when it comes from you through Privatae's sign-in, so nothing running inside your Host, its own model included, can act in your name.
  • SecurityAn app that runs its own program on your Host can now reach only the web addresses it declares, whatever its code does, and an app from the App Store is held to those addresses in every part of it, including its background workers.
  • SecurityBlocking a Host in Circles now refuses everything it sends while the people who use it can still reach you, and blocking a person refuses them from any Host and blocks their Host too until you unblock them. A line under the contact's name says which.
  • SecurityA message another Host says is from a person now shows as that person's only when your Host or Privatae has confirmed they use that Host; otherwise it reaches you as that Host's own message.
  • SecurityWhat you type into the Context app's search never goes into a web address.
  • SecurityA site published on Privatae now never receives the sign-in of a member who visits it, and members-only pages are never cached where another visitor could be served them.
  • FeatureCircles is now a deck of cards, one for each person and Host you know: a person's chat on the front, their Host on the back, and your own Host's conversations on the back of your card. Waiting on you, At the door and Coming up show what needs your answer, who wants to connect and your next events.
  • FeatureOn a person's card you can let your Host read your chat with them, and they see when you turn it on or off. The ask button under one of their messages hands just that message to one of your Host's threads, and they are not told.
  • FeatureYour conversation with another Host can now be split into topics, each on its own tab on the back of their card.
  • FeatureCalendar is now an app of its own, in the dock after Circles: your events and your Host's scheduled tasks in one calendar, where a task shows when it runs next, how often it repeats and every run with its result. You can add an event, mark one done or cancel one, a task of your Host's included.
  • FeatureNew and free in the App Store: Blender Engine and twelve Craft engines, from PhotoCraft and FilmCraft to WordCraft, GridCraft and DeckCraft, which your Host uses to make 3D scenes, pictures, video, sound, drawings, documents, spreadsheets, slides and PDFs. Your Host installs the one a piece of work needs, or you can, each one's window shows what was made there, and a file made in one can be handed to the next.
  • ImprovementYour Host can now wear an image it made, such as a Blender render, as your wallpaper, and use its images as artwork in desktop designs and artifacts.
  • ImprovementHow your Host replies is now under Response Shaping in Settings, searching everything is in the Context app, and your rules for who may reach you and the other Hosts on your machines are in the Network app. “Where did everything go?” in Circles shows where each part of the old Circles went.
  • ImprovementThe Context app's search now covers everything your Host can see: your documents, its memory, your projects, its journal and your code, each under its own heading.
  • ImprovementEach of your Host's threads in Circles now shows where it stands and how many tokens it has used so far, with what they cost.
  • ImprovementRegenerate and Compare on a reply, and the Activity feed, have been removed from Circles.
  • ImprovementA desktop your Host designs now has a phone layout and is checked at phone size, and setting a new design shows it on your phone too; Go back in Designs restores what your phone showed before.
  • ImprovementThe Workbench now takes its colours from your desktop design, dark or light, and This page shows the page's latest finished build with an Open button for each coding agent that finished it.
  • ImprovementPublished sites now have shorter addresses, and an old address sends visitors to the new one.
  • ImprovementOn macOS and Windows, a bastion installed as networked, the kind a shared machine runs for several people's Hosts, now runs as the system's own service: it starts when the machine boots, before anyone signs in, and comes back if it fails.
  • Bug fixWhen your Host gives work to an agent on a model it cannot run, it is now told before anything starts, instead of trying one guessed model name after another on your key.
  • Bug fixApps from the App Store can now run WebAssembly, so web builds of programs such as image editors load instead of hanging.
  • Bug fixAn app your Host builds that needs no network at all can now be published to the App Store.
  • Bug fixA nudge you send in Circles while your Host is working is no longer delivered twice when part of it was hidden as a secret.
  • Bug fixA site you unpublish now leaves your list in the Sites app, and publishing it again under the same name brings it back.
  • SecurityKeys and passwords you type are now cut out before your Host reads or keeps them in more places: searches, project and thread names, memory edits, notes on a build you pick, and messages from Telegram, Slack and Discord. What you type into the Workbench's searches no longer goes into a web address, and the chat box's warning names exactly what will be cut.
  • FeatureThe Workbench is now a book of pages: each open project is a page with where it stands, what changed since you last looked, its conversation and its runs, and the tabs on the book's edge light up when something lands or waits for you. The Bench app is retired, and its run board is now on the right side of every page.
  • FeatureType in the Workbench's Index to find any project, archived ones included, and press Enter to give your message to the project your Host picks, or to a new one when none fits. Choose “starts a new page” to make a new project for your words instead.
  • FeatureWhile your Host works on a Workbench page, Send becomes Nudge and adds your words to the turn in progress, and holding Send asks for more thinking on that one message. Each page shows the tokens and cost of all your Host's turns on it.
  • FeatureYou can now choose how hard your Host thinks in each thread, with the effort pick beside the model in Circles and the Workbench. The Orchestrator now offers effort levels for Claude models too, and the level you set reaches the model.
  • FeatureNew in the App Store: the Slack and Discord apps let you talk to your Host from Slack or Discord through your own Slack app or Discord bot, whose tokens stay in Keys, after you approve the pairing in the Network app. Your direct messages start turns in your chat, and the replies come back where you wrote them.
  • ImprovementWhen your Host waits on a connected MCP server, such as for its turn in a game or for a job to finish, it now asks again in the background without using the model and carries on when the answer changes. A long wait no longer runs as one turn that grows the whole time.
  • ImprovementOn a phone, the Workbench shows one page at full width, with its tabs in a strip along the bottom.
  • ImprovementA Workbench run card now counts a coding agent's thinking as activity and shows how long it has thought, and Brief from your Host shows exactly what the agent was sent.
  • ImprovementThe Workbench's project list and project search are now quick with hundreds of projects, where they could take several seconds.
  • Bug fixPressing Stop on your Host's turn now always stops it; a Stop pressed while the turn was quiet could be missed, and the turn ran on.
  • Bug fixA coding agent's brief now quotes only the notes and likes you gave in that project, so one project's instructions no longer reach another project's builds.
  • Bug fixStopping a large task your Host is working through now lets go of the sources it was working on, so a later task can work on them.
  • Bug fixIf Telegram refuses your bot's token, the Telegram app now says so in its window and picks up a corrected token from Keys within 10 minutes, without a restart. A connection it recovers from on its own no longer looks broken to your Host.
  • SecuritySupport tickets now leave out the account and request numbers that model providers put in their error messages.
  • SecuritySigning out now ends your Privatae sign-in on every device, and Host tabs you left open stop working within a few minutes of a sign-out.
  • SecurityYour Host session now lasts as long as you are using it, up to 24 hours, and only your own typing, clicks or coming back to the tab count as use. After an hour with no use it ends, and getting back in asks you to sign in again with a passkey or Google, while other Privatae sites stay signed in.
  • SecurityWhile you are signed in, signing in again with Google now works only with the Google account already linked to you, and Connect in your account settings adds a Google account only if its verified email is your own.
  • FeatureClaude Haiku 5.5 can now be chosen as the model for the Claude Code coding agent.
  • ImprovementYour Host can now correct a support ticket draft instead of opening another, and anything you unticked stays unticked. Tickets in Circles opens on a draft that waits for your Send, and if your Host changes it while you have it open, Send shows you the new version and sends nothing.
  • ImprovementYour Host now reads a Workbench comparison as one line per coding agent and code search results a page at a time, and opens one in full when it needs it, so these turns use fewer tokens on your own key.
  • ImprovementIn the Compute app, a cost reported by a coding agent's vendor now says how many runs it covers when some runs reported none, so a partial total no longer reads as the whole.
  • ImprovementCoding agents are updated: Codex 0.160.1, OpenCode 1.18.35, Antigravity 1.3.0, Cursor 2026.10.01 and Claude Code 2.1.286.
  • ImprovementYour Host now reads a short summary of large lists, such as your machines and your coding agents, and asks for one item in full when it needs it. A large result it has already used is no longer sent to the model again in the same turn, so long turns use fewer tokens on your own key.
  • Bug fixA model call whose provider reported no usage no longer counts as costing $0.00, and a turn's cost in Circles and the Workbench is marked partial when it covers only some of the turn's calls.
  • Bug fixWhen a model sends back an empty reply, your Host now tries again once with all of the turn's tools, instead of without them.
  • Bug fixWhen your Host session ends, the prompt to continue now appears straight away instead of minutes later, and a Workbench run card that could not load says so and loads again by itself once you are back.
  • FeatureYour Host can now connect to a remote MCP server and use its tools, once you approve the connection in the Network app with your code. The server's token stays in Keys, and you can disconnect it from the Network app at any time.
  • FeatureYour Host can now work through a large task in a project over many turns, one at a time or several at once as its memory has room for, keeping one record of the goal, the sources it found and what each one says. When the task is done, it writes a research document from that record.
  • FeatureA finding from your Host's research is kept only when the source's exact words are found in the page it read, and it can be kept in memory as what that source said, quoted and dated. If your Host reads the source again and the words are gone, the finding is marked out of date.
  • FeatureA running build or comparison in the Workbench now has a Kill button that stops it at once, along with other runs on the same coding agent, and your Host can stop one the same way. A stopped run says who stopped it instead of reading as failed.
  • ImprovementPromotional credits are now the first 2 GB for six months, for people who publish what they build. Accounts already granted keep what they were given.
  • ImprovementResearch by your Host now saves every page it reads whole on your Host, outside your projects' files, so it can search and reread them afterwards; a quick web search still gives a short cited answer. Saved pages nobody has used for 30 days are removed.
  • ImprovementIn the Workbench, a coding run's card now shows each command, file read and edit as its own step while the run works, and when the run lands its page loads right in the card, so you can scroll the conversation and open the version you want.
  • ImprovementWork your Host starts on its own is no longer limited to a fixed number of turns at once: it starts as many as its memory has room for, and a message you send always starts.
  • ImprovementA message you forward to your Host through the Telegram app now arrives marked as forwarded, with where it came from, and quoted, so it is never taken as your own words.
  • ImprovementIf you have promotional capacity, capacity you buy now adds to it, and when the promotion ends only the promotional part comes off. If a payment lapses, your Hosts run within the promotional part, smaller if they were given more, and if it cannot give each one 1 GB the smallest are paused until payment resumes.
  • Bug fixThe Grok coding agent works again, now on version 1.0.46, after xAI stopped accepting the older version.
  • Bug fixA web search that fails or stops early now says why and what to do, and searches answered by a backup model through OpenRouter now come back with their sources.
  • SecuritySigning in to Privatae now takes a passkey or Google; passwords are no longer used, and new accounts confirm their email and set up a passkey. An account without a passkey can add one with “Forgot username or password?” on the sign-in page.
  • SecurityA Telegram bot token or Slack app token pasted into the chat is now hidden from the model, your Host's memory and the conversation, and the chat box suggests storing it in Keys.
  • FeatureYour Host can now run on your Grok subscription: use Sign in with xAI in Keys, and its xAI model calls and web search go through your plan, never an xAI API key while you are signed in. If your Host has no model yet, signing in sets it to answer with Grok.
  • FeatureYour Host now writes its own skills to a set standard and keeps every version. In the Skills app you can see who wrote each version and what changed, and edit, retire or restore it.
  • FeatureNew in the App Store: the Telegram app lets you talk to your Host from Telegram through your own bot, whose token stays in Keys, after you approve the pairing. Replies arrive as messages and pictures, and anything Telegram cannot show comes as a link that opens it on your Host.
  • FeatureQuestions and approvals your Host raises in a conversation now come up as cards in that conversation in Circles and the Workbench, so you can answer them there, and a card answered somewhere else goes away.
  • FeatureYour Host can now wait for something to happen, such as a key added to Keys, your answer to a question, an approval or a site going live, and carry on then, with a deadline in case it never does.
  • ImprovementCircles and the Workbench now reopen on the conversation or project you last had open.
  • ImprovementThe old design catalog and the three bundled coding skill packs have been removed from your Host.
  • SecurityPages your Host draws, in artifacts, custom desktops, design previews and the Network app's map, can no longer send anything out, whatever they contain.
  • SecurityYour Host now makes and keeps the key for the private tunnel to your machines itself. Privatae no longer creates it.
  • SecurityAfter you sign in, a sign-in link can now take you only to a page on Privatae.
  • FeatureYour Host can now answer with a visual, a live page drawn in the chat in Circles and the Workbench, which you can save as an artifact, download or copy. An artifact a turn makes or changes now shows as a live preview in the thread.
  • FeaturePublished sites are now hidden from search engines until you list them, with the new Search engines switch on a public site in the Sites app or by asking your Host.
  • FeatureA status page at privatae.ai/status shows whether the website, sign-in, the API and Hosts are responding, checked every five minutes, with 90 days of history.
  • FeatureThis changelog at privatae.ai/changelog lists each change in plain English, dated the day it reached you.
  • ImprovementWorkbench projects made from tickets now share one Code Repository, each ticket on its own branch with its own Code Approval.
  • ImprovementYour connected accounts and the permissions you give apps are now kept in your Host's main database, so your Host's backups include them.
  • ImprovementWithin one turn, your Host no longer sends the model search results it has already shown it, which lowers what long turns cost on your own key.
  • ImprovementOn a custom desktop design, the memory reading in its bar now opens the panel that lists what is running on your Host.
  • Bug fixSearching your project code from your Host now works, and its index is kept in your Host's own database.
  • Bug fixIn the Workbench's project list, a dragged project now lands where you drop it, including out of Unfiled and while the list scrolls.
  • Bug fixWhen you create a Host, the label beside each personality slider now matches what your Host is told at that setting, and the Host is created with exactly what the confirm card shows.
  • Bug fixMachines connected through a bastion now move to your Host's new tunnel key reliably, and stay on it after a restart.
  • Bug fixIf a renewal payment fails, your plan's seven-day grace period now counts from the day the payment failed.
  • Bug fixWhen you write to one conversation from two places at once, your Host now answers one message at a time instead of running two replies side by side.
  • FeatureYour Host can now run commands on your own servers through their bastions, within the permissions you grant.
  • SecurityEvery part of your Host's interface now requires a permission, and each app runs on its own web address, so one app's window cannot read another's.
  • ImprovementYour Host no longer stops to ask for a go-ahead before carrying on with work. Rules you teach it are now preferences you can see, and it may update them in the open.
  • ImprovementLong-running work is no longer cut off by fixed time or size limits. A run stops only when it shows no sign of life, and large results are paged instead of cut short.
  • SecurityOn a Host shared by several people, each person now sees, adds and removes only their own passkeys.
  • SecurityYour Host now accepts a sign-in only when it comes through Privatae's own sign-in service.
  • SecurityPrivatae's platform services now check authorization on every protected request.
  • SecurityA bastion you pair can now receive a certificate only in its own name.
  • FeatureCode Approvals: each Workbench project uses one Code Repository, and when you approve a change, a window on privatae.ai shows it in plain English and merges it as you. Your Host never holds a credential that can merge for you.
  • FeatureYou can now delete a circle you own, leave one you belong to, and delete a Circles thread together with what your Host learned in it.
  • ImprovementThe Designs app now includes a shared shelf of desktop designs made by Privatae, next to your own.

September 2026

  • SecurityA build you have not published is now visible only to you, as an artifact, and publishing a site always makes it public.
  • SecurityWrong or missing authenticator codes entered by your Host no longer count toward locking you out.
  • FeatureNew Ships app: your Host can carry out a change across several of your Linux machines, such as building, publishing and restarting a service, after one approval for the whole run. Each step shows its machine and a signed receipt, and a step can be undone when a later one fails.
  • FeatureA public wiki at privatae.ai/wiki explains how Privatae works, and its Ask box answers questions from the wiki's own pages.
  • ImprovementYour Host now brings only your preferences into every conversation and recalls other memories when they are relevant, and a preference applies only to the project, app or thread it is about.
  • FeatureA new page at privatae.ai/providers compares eleven AI providers against five privacy requirements. Signed-in visitors can vote in its poll, and votes are not stored with your account.
  • Bug fixCancelling capacity from your account page now refunds the unused time, and shows the refund and the Hosts affected before you confirm.
  • SecurityA program your Host writes for one of your machines now sees only the files it declares, and the bastion refuses to run one that would reach a credential store such as SSH keys or saved cloud logins.
  • SecurityServer apps you deploy from the catalog, such as WordPress or n8n, are now private to you, including after you republish them.
  • SecurityRemoving a quarantine or another rule that keeps machines out of your network now asks for your authenticator code, and the Network app shows what is actually enforced.
  • SecurityApps that run inside your Host now answer only their own window, and coding agents always run in their own container.
  • Securityprivatae.ai now passes Host and account requests on only for a signed-in visitor.
  • SecurityAccount actions on privatae.ai, such as adding a passkey or accepting an invite, are now accepted only from privatae.ai's own pages.
  • FeatureThe Designs app is a shelf of desktops you can preview and apply, and your Host can make a desktop in the style of a website you name.
  • ImprovementOn machines anchored to your Host, updating to a newer signed bastion release no longer needs your approval on each machine. Moving to an older version still does.
  • ImprovementNetwork traffic from your Hosts is not billed. Each published site's traffic is measured against 1 TB a month; past that it will cost $5 per TB, a charge that is not switched on yet.
  • Bug fixRemoving a passkey from your account works again.
  • FeatureClaude Opus 5.5 is available in the Claude Code coding agent and the Orchestrator, and the effort level you choose for a coding agent now reaches the model.
  • Bug fixMemories your Host archived or replaced no longer appear in what it reads before answering.
  • SecurityBastion releases are now signed with a key kept off our servers, and the bastion refuses any update whose signature does not check out. Builds are reproducible, so anyone can rebuild a release from the public source and compare it.
  • SecurityFiles and folders you exclude from a connected folder now stay out of your Host's reach however a request names them.
  • SecurityYour bastion now refuses any pairing that would let its tunnel reach more than your Host's one address. With git 2.46 or newer, git no longer saves the token for your Host's git server in its own credential stores.
  • FeatureOn Windows, a request from your Host now raises a notification on your approval device, and one click opens a window where you can read each request and approve or deny it.
  • FeatureTurn types: give a thread a type that sets which tools, keys, machines, model and context your Host uses. Your Host can draft a type, and only your click activates it.
  • Bug fixHiding personal details in your connected folders is more reliable: overlapping matches become a single placeholder, and phone numbers and network addresses at the end of a sentence are now caught.
  • SecurityOn a machine anchored to your Host, anything that changes the machine now waits for your approval of that exact request. Traffic your Host sends out through such a machine can reach only the public internet, not the machine itself or your local network.
  • FeatureYour Host can now build a server, such as a private git server, and keep it running on one of your machines. The server has no network of its own, and only the Hosts you choose can reach it.
  • FeatureYour Host can now write a program to change something on one of your Linux machines. It first runs as a dry run in a sandbox with no network, you see exactly what it would change, and it runs only after you approve it.
  • SecurityA Host session now works only on the Host it was made for and ends when your Privatae sign-in ends, so switching Google accounts no longer leaves you signed in to a Host as the other account.
  • SecurityHosts outside a circle can no longer detect apps that are shared privately with that circle.
  • FeatureWhen your Host needs a decision from you, it now asks in a box over the chat with the choices laid out, instead of in a message you have to answer by typing.
  • ImprovementBuild reports use plain words, show the real state, arrive in order, and report a build as either landed or failed.
  • ImprovementThe prepaid balance, token packs and the wallet on your Host have been removed. Usage beyond your capacity is billed on your monthly invoice.
  • FeatureNew Oversight app: each of your machines records what normally runs on it and reports what differs, and Oversight lists everything your machines report, worst first, with when each problem was first and last seen.
  • FeatureCircles has a Bastions folder listing every machine your Host is paired with, who anchors it, and the other Hosts it serves.
  • FeatureBastions now update themselves when a new version is published, after a trial on a first group of machines.
  • FeatureYour Host can now stop an unexpected program that one of your machines reports, together with everything it started. Apps you are using and the bastion itself are always left alone.
  • ImprovementThe Workbench and Circles windows open faster, and replies stream more smoothly.
  • FeatureCircles threads: start a new thread, rename, close or split one, and see a table of contents of what your Host knows.
  • FeatureWorkbench compare: run the same task on several engines or models at once, then preview, pick and adopt a result.
  • FeatureYour Host reads uploaded PDFs, Office documents, RTF, email, HTML and zip or tar archives itself, and documents and pictures attached in chat work with every model provider.
  • FeatureWorkbench projects are now split into modules with saved versions you can restore, projects sit in coloured buckets you can drag between, and independent parts of a plan build at the same time.
  • Bug fixSeveral coding runs on the same engine no longer stop each other partway through, and the engine's time is charged once.
  • Bug fixWorkbench turns on OpenAI models through OpenRouter no longer fail before replying.
  • Bug fixConnected folders on Windows machines are now indexed, and the bastion's local agent reads text from more PDFs, including ones printed from a browser.
  • Bug fixImage generation and image reading through public model endpoints work again, and images returned through OpenRouter are now kept on your Host.
  • FeatureA bastion can now pass your Host the alerts, metrics and logs from monitoring you already run on that machine's network. A machine whose program list could not be read is now reported as such, never as a machine with nothing running.
  • ImprovementEvery build that lands is now reviewed by your review model, and the review's verdict appears with the build and its report.
  • ImprovementSigned-in visitors can now read the privatae.ai homepage instead of being sent to their account page.
  • SecurityFeature proposals your Host files now go straight to the shared proposals board, and no copy is kept under your Host's own account.
  • Bug fixOn an account with free capacity, buying more capacity no longer takes its Hosts offline.
  • SecurityOnly apps you have allowed can run operations on your machines, and scheduled prompts now have a spending limit.
  • FeatureSet a dollar budget for each turn in a thread, and your Host spends within it instead of stopping after a fixed number of steps.
  • FeatureA search box in Circles and the Workbench searches your memory, documents, projects and code in one place, and apps can use the same search.
  • FeatureGroup circles: a member list kept on the creator's Host, signed votes on open ballots, join requests, and apps that can be granted to a whole group.
  • FeatureIf you used a public web app and then install the same app on your own Host, you can bring over the data you created there.
  • FeatureGPT-6 Astra is available in the Codex coding agent and the Orchestrator.
  • ImprovementIf you open a Host while signed in with an account that doesn't have access to it, the page now shows which account you are signed in with and links to sign in again.
  • FeatureThe bastion and its local agent are now open source under the GNU GPL, and their source is public for you to read and build yourself.
  • FeatureThe bastion now has a local console and a tray icon on your machine. It shows in plain words what each Host may do there and what it has asked for, lets you switch any kind of access off, and lets you answer approval requests.
  • FeatureYour machine can now turn documents into text itself, including PDFs, scanned pages, Office files, audio and video, so only the text goes to your Host. A machine offers only the kinds it has the tools to read.
  • FeatureYou can now let another person's Host use one model running on your machine, without giving it any other access there.
  • SecurityYour Host's memory search now runs with a restricted database account that cannot read your Host's keys.
  • Bug fixMessages and contact requests between Hosts now go directly between the two Hosts and arrive once, and a message that cannot be delivered says why.
  • SecurityDeleting a Host, or reaching the end of the time its data is kept after a subscription ends, now removes all of its data, including its database.
  • FeatureYour Host can now use local models on a machine you allow, and download or remove models there with your approval at that machine. Long downloads run in the background.
  • FeaturePeople who publish what they build can apply for 4 GB of free capacity for six months, in exchange for one write-up.
  • ImprovementIf a capacity renewal payment fails, your Hosts keep running for seven days after the billing period ends.
  • ImprovementUsage beyond your capacity in a billing period is now added as a line on your next invoice.
  • Bug fixOn Windows, an automatic update no longer leaves the bastion stopped, and starting a second bastion on the same machine is refused with a clear message.
  • Bug fixDeleting your account now removes only the Hosts you own and cancels your capacity subscription.
  • Bug fixAccounts that pay for capacity are no longer labelled Free or offered an upgrade, and checkout no longer sells capacity that isn't available.
  • Bug fixHosts on capacity accounts can be resumed again.
  • FeatureA new page at privatae.ai/appliance describes the upcoming on-premises appliance and has a form for asking about it.
  • SecurityOther programs on your machine can no longer use the bastion to send instructions to your Host.
  • SecurityThe platform can no longer search the contents of your Host's memory.
  • FeatureA shared machine, such as a server several people's Hosts use, can now run one bastion anchored to one Host. That Host approves, refuses and removes every other Host's pairing with it.
  • FeatureYour Host can now read a machine's state, including open ports, firewall, services, disks and installed programs, see the AI agents running on it, and read the windows and controls on its screen. Reading changes nothing on the machine.
  • FeatureYou can now enrol an authenticator on one of your machines by scanning a QR code, and approve requests at that machine's own console with a code.
  • ImprovementIf the entry point a bastion connects through stops answering, it now switches to another one on its own, and a brief failure no longer forces a switch.
  • ImprovementThe bastion now installs and keeps running the local agent that indexes your connected folders, with no manual setup.
  • Bug fixPairing a bastion with your Host no longer fails with an intermittent error.
  • ImprovementPlans have been replaced by memory capacity priced per GB per month: $9 pooled, $12 on a dedicated server and $15 on a managed dedicated cluster. Hosts are free and unlimited.
  • Bug fixSwitching between Hosts on your account no longer fails with an error.
  • Bug fixClaiming a transferred Host now accepts the code exactly as it appears in the email.
  • SecurityYour network rules now apply to coding agents too: a destination you have blocked in the Network app is blocked for their runs as well.
  • FeatureThe Host Manager shows all your Hosts as a grid you can sort into groups, each tile shows that Host's desktop, and clicking one opens it.
  • ImprovementNew sites you publish get a shorter address without your builder name in it. Existing addresses keep working.
  • ImprovementThe Compute app now shows only figures that were actually measured, with correct cache hit rates and cache-aware cost estimates.
  • ImprovementThe sending address for email from a published site no longer includes your Host's name.
  • FeatureUpdate every out-of-date bastion in one step: a single button names the version and the machines, and asks once.
  • FeatureNew Terminal app: open a shell on one of your machines through its bastion, under the permissions you have granted.
  • Bug fixPages on privatae.ai no longer load slowly or stall in browsers that had visited before.
  • Bug fixContinue with Google now goes straight to Google sign-in, without errors or retries.
  • FeatureThe Workbench is now organised around projects: start one from the Start dialog, file projects in folders, and find them in a grouped list.
  • FeatureThe Network app can switch between map views, including a physical view, and shows other Hosts that share your machines so you can connect with them from Circles.
  • Bug fixThe browser behind the Browser app now shuts down when it is idle instead of running, and being charged, for hours.
  • Bug fixDeleting or transferring a Host now returns its memory and storage to the right account's pool.
  • FeatureYour Host can read the Gitea repositories you grant it, add them to its code search after you agree, and propose changes to repositories it does not own as pull requests.
  • FeatureYour Host now checks its own setup and tells you when something needs attention, with the fix it can apply or the question it needs you to answer.
  • ImprovementWhen you ask for several coding agents at once and your plan does not have memory for all of them, the rest wait and start as memory frees, and the Workbench shows which are running and which are waiting.
  • ImprovementClaude models now get their full 1 million token context window instead of a 200,000 token limit.
  • Bug fixTurns on Claude models that were failing with a provider error about the temperature setting work again.
  • Bug fixWhen a Workbench build finishes, its report now appears on screen, or the Workbench says plainly that it could not be delivered.
  • FeatureYou can now tell your Host in plain words what it may and may not do on your machines. Anything you say it must not do becomes a signed rule that overrides broader permissions.
  • FeatureBrowser agents: press Create agent, do a task once by hand, and save it to repeat on request or on a schedule. No AI model runs when it repeats.
  • FeatureA new setting under Response Shaping in Circles controls how much your Host explains: explain everything, explain new things, or just use the terms.
  • FeatureWhen your Host delivers an app, it now starts it, checks that it runs cleanly, and starts a repair if the check fails.
  • ImprovementIf your Host ends a reply by promising to start or check something and then does not, it is now prompted to carry it out instead of leaving you waiting.
  • ImprovementThe Browser app's live view is faster and smoother while you scroll.
  • ImprovementThe Browser app now has an address bar, works with any website, and is no longer tied to one vendor's sign-in.
  • SecurityAn app you build that runs its own process can now reach only the internet addresses it declares. Everything else is blocked.
  • FeatureAn app that runs its own process can now be set to keep running all the time, instead of stopping when you close its window.
  • Bug fixInstall as my app in the Workbench works again, an app that fails to start no longer reports itself healthy, and reinstalling an app runs the new version straight away.
  • SecurityActions that need a critical approval are now refused if the approval cannot be verified, and the limits on what a Host's database access can change are stricter.
  • FeatureYour Host can design your desktop as a single page it builds for you, covering the wallpaper and optionally your app icons.
  • FeatureCircles now has two lists, Hosts and People: you can message other people directly and send a connection request by email address. No AI model reads or answers a message between people.
  • FeatureEvery Host now sends a weekly summary to your Inbox covering new rules, coding runs, memory health and anything not yet set up. No AI model is involved in writing it.
  • ImprovementThe Network app now separates AI agents running on your machines from ordinary apps, with one card per agent family.
  • ImprovementA Host with no embedding model now says that recall by meaning still needs setting up, instead of reporting an outage. If a machine on your network already serves an embedding model, your Host connects to it on its own.
  • ImprovementSimple mode in the Orchestrator is now a four-part setup checklist: thinking, memory, seeing and hearing.
  • ImprovementThe Capacity panel on your account page now shows your storage pool next to memory.
  • Bug fixAdding another Host to your account works again. It had reported success without creating the Host.

August 2026

  • FeatureScheduled work can now repeat one fixed operation without an AI model. It is listed in the Agents app as a standing job with a Stop button.
  • SecurityAn app's author now decides whether other people may publish a website built from that app.
  • FeatureIn the Browser app, Save these entries keeps what you typed into a form, sealed field by field in Keys, and in Keys you choose which sites your Host may fill in without asking each time.
  • SecurityAgents your Host sends out can never be given administrator or shell access. The platform refuses such a permission outright.
  • SecurityWithdrawing access to a folder on one of your machines now takes effect on that machine straight away, and each machine reports what it is actually enforcing.
  • SecurityThe bastion installers now check every download against its published checksum and install nothing if it does not match.
  • FeatureCircles has a new Tickets section. Your Host can draft a support request that shows exactly what would be shared, nothing is sent until you approve it, and you follow the replies there.
  • FeatureYour Host can now search a folder you connected from one of your machines by meaning, and see a map of its contents before opening files.
  • Featuregit on your machine can now reach your Host's git server through your Host's tunnel.
  • FeatureMemory mirror: a machine of yours running a bastion can keep a live copy of your Host's memory on your own hardware.
  • SecurityIf you paste something that looks like an API key, password or private key into a message, it is caught before sending, and you can send it redacted or edit it. It never reaches the model.
  • SecurityCreating a Host no longer stores any of its memories in Privatae's platform database.
  • SecurityPublished sites are now cut off from the systems that run them.
  • FeatureCircles shows a slim line above the message box naming the work your Host did on its own, such as forming memories and research, with failures shown in amber and a plain cause.
  • FeatureYou can transfer a Host to someone else, such as a client, with a one-time code. When they accept, they take over the Host and its billing.
  • ImprovementIn the Workbench, replies now appear in the right order, the code pane opens on the project's own repository, and a failed phase is retried once before the build stops.
  • ImprovementPublishing or restarting a site now reports a failure when the site doesn't actually start, instead of showing it as live.
  • Bug fixIf Privatae is briefly unable to reach its database, opening a Host now says the service is temporarily unavailable instead of saying you don't have access.
  • SecurityApps on your Host now send their access token only to your Host, never to other websites they contact.
  • FeaturePublishing an app to the App Store now goes through human review. Publisher shows the Publishing Agreement and lists your publish requests with their status.
  • FeatureThe Orchestrator now opens in Simple mode, where one click routes every job to a recommended model on a provider you hold a key for.
  • ImprovementThe App Store now shows where every app runs and how much of your plan's memory it takes.
  • ImprovementThe Browser app now starts when you open it and shuts down on its own once you stop using it, so it takes no memory while idle.
  • FeatureYour Host can now read a web page you name, and look things up on public GitHub.
  • FeatureThe Compute app now shows full cost and usage: what each project cost, how every charge is measured, and estimated model spend, with billed amounts and estimates kept apart.
  • FeatureTell your Host what you like or dislike and it carries that into future builds. Something you ban becomes a rule it will not break.
  • FeatureA site or app you publish can now declare itself installable, and visitors get a button to add it to their home screen.
  • ImprovementThe Workbench now lists every coding run by number in a collapsible log with its live feed and Open app button, and you can refer to a run by its number in chat.
  • FeatureCoding Tutor: in the VS Code app, your Host works beside you in a Tutor panel. It explains your code, proposes edits you accept or reject, and runs commands where you can watch.
  • FeatureThe Orchestrator's coding section is now Coding Engines, where you pick a default engine and set each one's model and effort, and Multi-Agent Coding sets which engines run together or in turn.
  • FeatureAntigravity, Google's coding agent, is now available as a coding engine on your Host, using your own Google account or a Gemini API key. The Copilot and Factory coding engines have been removed.
  • FeatureFinished builds, finished agents and published sites now arrive in your Inbox.
  • FeatureA build's live terminal now appears inside the conversation, with a full-screen view, and a build run on several engines at once shows a terminal and an Open app button for each.
  • Bug fixYour Host is drawing facts from your conversations into memory again.
  • FeatureThe Workbench and Circles now show which provider and model answered each message, and mark in amber when a backup provider answered.
  • ImprovementA build always runs on the coding engine you picked or is refused with the reason, and a failed run shows the engine's own error. When a build lands, Open app shows the finished result.
  • Bug fixStarting the Kimi coding engine works again.
  • Bug fixApplying a Host update from Settings works again.
  • SecurityOnly you can set the key that your sealed credentials are encrypted to, and doing so needs your authenticator code. Your Host cannot change it.
  • FeatureIf a program on your Host crashes, the crash dump stays on your Host for you to keep or delete. The platform never collects it.
  • SecurityYour Host and its agents can no longer buy paid apps. You buy them yourself in the App Store, and a purchase can be refunded within 48 hours.
  • SecurityPrivatae no longer handles or stores Claude sign-in tokens. Claude connects with your own credentials on your Host, like every other provider.
  • FeatureGetting Started: a first-run tour that walks a new Host through Keys, the Orchestrator, Circles and the Workbench, and checks each step on your Host.
  • ImprovementClaude Code now signs in with Anthropic's own login, the same way as the other coding engines.
  • ImprovementYour Host now keeps as much of a conversation as the model's window can hold, and long conversations reuse the provider's prompt cache, which lowers what you pay on your own key.
  • ImprovementWhile a new Host is being set up, your account page shows each stage and says the Host is ready only when it actually is.
  • Bug fixSigning in to Codex and Grok through your Host now completes and stays connected, because sign-ins are renewed automatically unless you turn that off.
  • Bug fixMessages sent from one Host to another are delivered again.
  • ImprovementYour session now renews itself while you work, an expired session shows a single Continue prompt, and your window layout is kept between visits.
  • FeatureThe Orchestrator now lets you choose the provider for embeddings, and Kimi subscription keys work for chat and model lists.
  • ImprovementThe privatae.ai homepage loads faster, the Get started button shows on phones, and text contrast and keyboard navigation across the site are better.
  • FeatureKeys is now a menu with one section per kind of credential, and you can switch a key off without deleting it. The Orchestrator has a new Balances tab showing what each provider account holds.
  • SecurityRevoking a coding engine's credential in Keys now fully disconnects that engine, and each engine runs only on its own vendor's key.
  • FeatureThe Orchestrator shows every coding engine in one table with its connection, key, models and reasoning effort, and Connect starts that vendor's own sign-in through your Host.
  • FeatureKimi Code is now available as a coding engine, and Kimi can be used as a model provider.
Changelog — Privatae