Changelog
What’s shipping.
Cirvix is in private beta. This is a running account of what has been built and what’s next — not a highlight reel of a finished product.
Platform
Free local scanner
`npx @cirvix/agent-control scan` ships with no account required. Read-only: it inventories the agents, MCP servers, and credentials already running on a machine and reports what's currently ungoverned.
Observe
Audit log goes hash-chained
The decision log moved from append-only to append-only-and-verifiable: each record commits to the hash of its predecessor, with checkpoints now published on a schedule for design partners.
Broker
Human Approval, end to end
A held call now resolves through Slack — the approver sees the resolved arguments and the policy that raised the hold, and the run resumes on approval instead of failing.
Broker
MCP Gateway in private beta
Server registry, pinned tool definitions, and drift detection are live for the first design partners. A server that changes what a tool does now gets held for review instead of taking effect silently.
Enforce
Secrets brokering
Agents stopped receiving credential values this week. The first real calls — Stripe, AWS — now route through handle substitution at the boundary.
Enforce
Agent Identity
Workload identity issuance shipped: short-lived, attested credentials replace long-lived tokens copied into environment variables.
Enforce
The enforcement path
First version of the interception layer: argument-level inspection, deterministic policy evaluation, and deterministic refusal. Everything else on the roadmap sits downstream of this.
In progress — not shipped
Next
- Policy simulation against recorded traffic, from the CLI and the dashboard
- A2A Gateway — delegation chains with monotonic scope reduction
- Compliance exports (SOC 2 / ISO 27001 / EU AI Act shapes) for Business and Enterprise
- SOC 2 Type II audit groundwork — see the compliance roadmap on the Security page