July 30, 2026
Agent memory, triage, and session monitoring overhaul
← All updates
Agent memory, triage, and session monitoring overhaul
10 new 15 improved 18 fixed
A new Memories UI, five data-integration connectors, session monitoring improvements, and a wave of Agent Output quality fixes make this a wide-ranging release.
New
- Agent memory viewer. A new Memories page under Agents lets operators view, inspect, and manage project memory entries — including version history and diffs — directly in the UI.
- Data-integration connectors. Five connectors — Atlassian, Azure DevOps, GitHub, GitLab, and Linear — are now available as capabilities on the platform.
- Inactive session filter. Agent Sessions now has an ‘Inactive’ filter to isolate sessions that are idle (past 15 min) but not archived — previously these couldn’t be separated from active sessions.
- TUI built-in bug reporter. The TUI now has a built-in bug reporter (
/report-bugorrin console) that assembles a privacy-reviewed diagnostic bundle and submits it without losing logs after a crash. - Hub sync for air-gapped on-prem. New
dn capability syncanddn task synccommands support pulling hub content from SaaS (or another on-prem) into a local directory and pushing it to a self-hosted instance, enabling air-gapped on-prem loading. llm-wikiandanalysis-ledgercapabilities. Two new capabilities are now available:llm-wiki(compiles source material into linked wiki pages) andanalysis-ledger(maintains a resumable code-analysis frontier with evidence-bearing claims).- AST-based JS/TS static analysis in web-security. The web-security runtime now includes ast-grep, enabling AST-based JS/TS static analysis without requiring semgrep, CodeQL, or a jxscout license.
- Session transcript collapse and copy controls. Transcript message headers are more legible, with new collapse and copy controls per message in the session transcript view.
- Models and Datasets table view in Hub. Models and Datasets browse pages now support a table view alongside cards, and all four Hub browse pages share a unified toolbar with separate sort and filter controls.
- Findings Can Now Be Triaged Directly in Agent Output. Reviewers can now set a finding’s status and add notes directly from its detail panel in Agent Output, so findings can be triaged in the same place they’re reviewed.
Improvements
- Session monitoring redesigned. Session monitoring now shows a Last Msg column with relative activity time, highlights sessions active in the last 15 minutes, and adds forward/backward transcript pagination with tailing mode.
- Unified tooltip system. Hover tooltips across the app are now faster, consistent, and keyboard-accessible — replacing unreliable native browser tooltips with a unified tooltip system.
- Agent Output triage UX improvements. Stat cards for ‘Needs review’ and ‘Critical + High’ on the agent outputs page are now clickable filter toggles, and the items grid has a new sortable ‘Updated’ column.
- Session header legibility. Session headers are redesigned for better legibility, with clearer titles and improved layout in the agent sessions view.
- Transcript message body legibility. Transcript message bodies in session views are easier to read, with improved layout and rendering for tool events and message content.
- Sessions group-by available to all orgs. Sessions group-by control is now available to all orgs, with simplified options (None / Workflow / Capability / Agent / Source) and workflow runs collapsed by default.
- New workspace dialog org picker. The ‘New Workspace’ dialog now includes an organization picker, so you can create a workspace in any org without switching context first.
- Automatic Agent Output recovery at session freeze. Agent Output items from failed
report_itemPOSTs are now automatically recovered from span backups when a session is frozen, without requiring manual operator intervention. - CLI skill task discovery and BYOK model resolution. The CLI skill agent can now discover tasks by name and resolve BYOK models by looking up stored API keys via
dn secret list. - Hub filter and sort label consistency. Hub filter and sort labels are now consistent across Models, Datasets, Capabilities, and Tasks/Environments — e.g. ‘Keywords’ renamed to ‘Tags’, sort options formatted as ‘Name: A-Z’.
- Agent Output documentation. Agent Output docs now cover CSV export (including the 10,000-row limit), the type selector UI, correct
report_itemcall signatures, and therefuniqueness constraint with a namespacing workaround. - Credit pricing documentation. The Credits documentation has been rewritten to clearly explain how hosted inference consumes credits, with a worked example and BYOK billing distinctions.
- Self-hosting docs restructured with TLS guide. Self-hosting docs now include a dedicated TLS guide, focused configuration pages for external data stores, sandbox runtime, and auth/email, plus fixes for 15 verified inaccuracies; markdown tables now render correctly sitewide (previously broken on 109 pages).
- Private-CA client trust documentation. Self-hosting docs now include copy-pasteable instructions for connecting the CLI, TUI, and SDK to private-CA or self-signed HTTPS deployments without disabling certificate verification.
- Mermaid diagram rendering restored in docs. Mermaid diagrams on the self-hosting architecture and model-deployments docs pages now render correctly instead of showing raw flowchart source.
Fixes
- Enterprise LiteLLM provisioning idempotent. On-prem enterprise deployments no longer lose access to all
dn/*models after the first use — repeated LiteLLM key provisioning now succeeds reliably. - On-prem config combinations unblocked. On-prem installs combining external PostgreSQL with the bundled LiteLLM proxy now deploy successfully; previously 64 of 256 Admin Console config combinations failed at deploy time.
- ATLAS ASR false negatives fixed. ATLAS now correctly credits success when a dangerous tool actually executes, even if the judge scored low or trials errored — fixing ASR 0 false negatives on real attacks.
- Assessment detail tiles reconciled. Assessment detail tiles (Total Attacks, Actionable Findings, ASR) now match the findings table instead of showing contradictory values.
- Triage reversible and notes-independent. Triage status on Agent Output findings can now be cleared (returning items to ‘needs review’), and adding notes no longer silently marks a finding as triaged.
- Concurrent item writes no longer race. Concurrent writes to the same item no longer race on event sequence allocation, eliminating 500 errors and dropped audit events under load.
- Custom capability item types accepted. Custom capability item types (e.g. from
report_item) no longer get rejected with a 400 error after the capability has been pushed to your org. - Trace-backed item rebuild functional. POST /items/rebuild (trace-backed recovery for structured agent output) now works correctly — previously it 500’d before returning results due to multiple independent defects.
- Runtime token recovery after cold-start timeout. Runtime tokens are no longer lost when
start_runtimetimes out during a cold start — the SDK now reconnects and retrieves a valid token automatically. - SDK tolerates transient 404s on task-environment polling. SDK now tolerates transient 404s when polling a newly-created task environment, fixing provisioning failures in multi-replica deployments.
- Self-hosted resource preset respected. Self-hosted API pods now correctly inherit
global.resourcesPreset; previously, a hardcoded ‘large’ preset overrode customer-selected sizing for every on-prem deployment. - Session URL params preserved across refresh. Refreshing or sharing the Agent Sessions view now preserves the selected session and report — the
?sessionand?reportURL params no longer get dropped on page load. - Resumed headless session transcripts update live. Resumed headless agent sessions now show the latest transcript data without requiring a full browser refresh.
- Selected project retained when switching to Agent Output. Navigating from Agent Sessions to Agent Output now retains the selected project instead of resetting to
default. - Column selector hides any column without resetting state. Column selector on Agent Output type tables now correctly hides columns like Severity and Status, and toggling columns no longer resets your sort or triggers an extra data fetch.
- CSV exports named by workspace, project, and type. Agent Output CSV exports are now named
agent-output-{workspace}-{project}-{type}-{date}.csvinstead of a genericfinding.csv, so downloads from different projects no longer collide. - Eval output excluded from Agent Output and Sessions views. Eval run output no longer appears in Agent Output or Sessions views; an empty Sessions list now explains when a project’s sessions were deleted or archived.
- Admin Settings button persists after profile changes. Platform Admin Settings button no longer disappears after updating your profile name or username — no logout required.