Changelog

Every build, in the open

The runtime handles real funds, so the changelog is part of the product. Each entry says what shipped, what moved, and what got harder to break — including the changes that made the agent less permissive rather than more capable.

LatestRemiora 0.1.05 August 2026

The runtime leaves private testing. Agent and mission modes, the fail-closed safety gate, and tiered local memory are all in the box, signed for macOS, Windows, and Linux.

Download 0.1.0macOS 12+ (Apple Silicon & Intel) · Windows 10/11 x64 · Linux x86_64 (glibc 2.31+)

v0.1.0

5 August 2026

Stable

macOS · Windows · Linux

First public build

The runtime leaves private testing. Agent and mission modes, the fail-closed safety gate, and tiered local memory are all in the box, signed for macOS, Windows, and Linux.

Added

Public desktop builds: .dmg, .exe, .AppImage and .deb, each with published checksums.
Mission mode with mandatory deadline, capital allocation, and maximum-loss bounds.
Agent mode for continuous operation with a session cadence limit.
Restricted and full authority as a locked session dimension, narrowable but never widenable.
Append-only local ledger with hash-chained entries covering wins, losses, and blocked attempts.

Changed

Policy is compiled once per session and pinned by hash for the run's lifetime.
Denials now report the failing predicate instead of a generic error string.

Security

Keys are encrypted at rest with a passphrase-derived key and excluded from backups.
Seed phrases and raw signatures are redacted before any write to memory or log.

v0.0.9

22 July 2026

Beta

macOS · Windows · Linux

Memory that forgets on purpose

Tiered memory becomes durable: lessons decay, promotion is judged locally, and nothing that shapes a limit can be written by a lesson.

Added

Three memory tiers — working, recent, and long-term — with separate retention rules.
Half-life decay of thirty days on lesson strength, asymptotic toward zero.
Local judge for promotion to long-term memory; a malformed verdict promotes nothing.

Changed

Memory is an input to the planner only. The safety gate no longer reads it at all.
Working memory is discarded at the end of a run instead of being carried forward silently.

Fixed

Duplicate lessons from restarted runs collapsed into one entry via content hashing.

v0.0.8

4 July 2026

Beta

macOS · Windows · Linux

Stop conditions become a state machine

A mission can now only end in one of five recorded ways. Anything else is treated as a defect and surfaced instead of swallowed.

Added

Terminal states: deadline reached, capital depleted, max loss reached, no viable opportunity, emergency stop.
Emergency stop revokes signing authority synchronously before any unwind begins.
Every termination writes reason, timestamp, realised PnL, and open positions.

Removed

Silent mission exit on planner exhaustion; it now records a reason.

Fixed

A mission at exactly its loss ceiling no longer opened one final position before halting.

v0.0.7

16 June 2026

Beta

macOS · Linux

The gate stops trusting the planner

Enforcement moved out of the model's reach entirely. There is no bypass flag, no privileged caller, and no natural-language escape.

Added

Ten-predicate evaluation order with short-circuit on first denial.
Pre-trade simulation against pinned chain state; a failed simulation is a denial.
Multi-source price agreement with a bounded deviation check.
Sell-path probe before any buy, catching transfer taxes and blocklists.

Changed

Unknown, timeout, and unreachable now all resolve to deny rather than allow.
The planner receives a machine-readable reason instead of a free-text explanation.

Security

Prompt-injected instructions can no longer reach any component that widens a limit.

v0.0.6

28 May 2026

Preview

macOS · Linux

Approvals that expire

Restricted mode grows teeth: an unanswered approval is a denial, not a pause, so silence never becomes consent.

Added

One-hour expiry on approval requests, logged as a denial with its own reason.
Approval queue with per-action context: route, size, expected impact, and worst case.

Changed

A run continues past an expired approval instead of blocking on it indefinitely.

Fixed

Approvals could be answered twice under a fast double-click.

v0.0.5

9 May 2026

Preview

Linux

Local custody, first cut

Keys are generated on the machine, encrypted at rest, and never leave it. Our infrastructure stops being able to touch funds.

Added

Local keystore with generate and import flows.
Encrypted-at-rest storage keyed from the operator's passphrase.

Removed

All remote key material, including anything present in backup payloads.

Run the current build

Free and open source. macOS, Windows, and Linux.

Download the app