Skip to main content

​
v1.16.2 — March 27, 2026

​
Tools and platform extensibility, chat and handoff reliability upgrades, and Snowflake and deployment controls

​
RBAC and Access Governance

Access control moved to role-scoped enforcement across runtime and UI workflows.
  • Pass owner_identity in blueprint RBAC checks
  • Add role_names to uat-oauth-connection-flow test plan
  • Dedicated non-admin User 3 for UAT RBAC tests
  • Add CI guard for RBAC permission model changes
  • RBAC full endpoint sweep — protect unguarded admin routes

​
Snowflake and Deployment Operations

Release and deployment workflows gained safer controls and improved environment handling.
  • Mission status stuck — remove RETURNING for Snowflake compat
  • Scheduled release uses minor bump and fix deploy_alpha type coercion
  • Use distinct anchor_tag_prefix for QA snowflake deploys
  • Use release channel from config instead of hardcoding by provider
  • Pass REPO_STATE_SHARED_SECRET to Railway deploy callers

​
Databricks and OAuth Experience

Enterprise auth and workspace onboarding flows were expanded for operator reliability.
  • Sync blueprint improvements and genericize all databricks_* manifests
  • Remove genesis_bots import that crashes oauth-proxy on Railway
  • Prevent 5 recurring issues from Databricks migration blueprint runs
  • Add stability flag to skip flaky OAuth UAT tests
  • Remove deleted google-workspace route from iOS harness test (auto-triage)

​
Git Browser and Developer Workflow Hardening

Git and project workflows now provide safer defaults and predictable automation behavior.
  • Security dispatch branch resolution and dashboard matching
  • Resolve branch-tip RC tag instead of:rc in security scans
  • SE | Git browser folder grid
  • Harden app usage fact repository writes
  • Retire GA tags — use repo variables for GA tracking

​
Data Layer and SQLAlchemy Modernization

Metadata and ORM improvements improved backend parity and multi-backend consistency.
  • Fix SQLite nested transaction in project state sink
  • Iceberg first-class data access with multi-backend connectors
  • Replace harvester with twin: full migration implementation
  • Alpha: cache mission metadata and harden runtime fixes
  • Dashboard-library: improve tag filtering and metadata guidance

​
Chat, Handoff, and UI Reliability

Thread continuity and user experience were hardened across handoff and UI surfaces.
  • Improve Google Sheets reliability and smart sync for flow steps
  • Harden auth middleware and internal route security
  • Remove hardcoded dev/genesis provider check from create-patch
  • Remove unused CheckScope import from StatusPanel
  • Handle version tags in security scan image resolver

​
Tools, Skills, and Platform Extensibility

Agent tooling and operational capabilities were expanded for runtime administration.
  • Make document_index_tools always-on so Eve reliably searches genesis-docs
  • Document Flow missing files from write_multiple tool calls
  • Google Drive tool identity passthrough and GET_SHEET payload capping
  • Accept both ‘connection’ and ‘connection_id’ in flow step definitions
  • Use generic labels in connection dialog

​
Upgrade Notes

Upgrade from v1.12.1 to 1.16.2 includes broad access-control, deployment, and reliability changes; validate role mappings, deployment defaults, and environment configuration in lower environments before production rollout.