Ship Log

Engineering narrative — what we built, why it matters, and proof of lockstep integration.

A chronological record of significant engineering work in BrainstormRouter. Each entry tells the story of what was built, why it matters, and provides a lockstep traceability matrix.

DateEntrySystems
2026-05-16/.well-known/build.json — single GET answers 'is this deploy current?'api marketing-site ai-discoverability
2026-05-16Open specs published: Trust Envelope v1 + MCP-OAuth Bridge v1 at docs.brainstormrouter.com/specs/docs specs sdks
2026-05-14Trust envelope + ErrorEnvelope + activation gate — all 6 goal conditions livetrust-envelope error-envelope ops-status fortress
2026-05-14Intelligence endpoints expose top-level .summary envelope (R25 probe-null fix)api router intelligence
2026-05-13Every route in src/api/routes/** now flows through defineCapability() — 618 routes, 0 inline registrations, hot path includedapi capabilities completions auth
2026-05-09A-2 — trust envelope synthesizer formalized: mtls_fingerprint, call counters, boot wiringsecurity trust-envelope gateway
2026-05-09A-3 — trust envelope load-bearing for routing: tier/scope/xdr_risk/anomaly gatesrouter trust-envelope gateway
2026-05-09Audit chain canonicalization — single source of truth fixes verify-side drift (was broken since 0d46a1728)security api audit
2026-05-09Dual-mount /v1/* for routing intelligence + ops endpoints — closes long-standing SDK driftapi sdk rbac
2026-05-09Notification cooldown — move from emit-time bus gate to per-subscriber decorationnotifications infra
2026-05-09DeepSeek V4 catalog: add v4-pro/v4-flash, fix V3-era pricing drift, schedule legacy alias deprecationrouter intelligence catalog
2026-05-09P0a — Agent budget enforcement (canonicalize agentLimits keys; closes Computer Protocol #244)api security
2026-05-09P0b — mTLS recovery hints + ECS misconfiguration warning (closes Computer Protocol #245 partial)api security
2026-05-09P1 #246 — forced tool_choice excludes reasoning models; reasoning-token cost safety netrouter auto-selector
2026-05-09Static-asset bundling — closes /openapi.json 503 + /.well-known/agents.json 404 + brk_ docs typoapi build docs
2026-05-09Trust Envelope (A-1) — JOSE-aligned EdDSA schema, signing, audit-only middlewaresecurity api
2026-05-09TS-2 #248 — align audit, replays, streaming telemetry, feedback schema, cost center attributionapi completions telemetry
2026-05-08Shadow comparator crosses statistical significance — Thompson +4.94% reward over static_price, p=0.002router intelligence comparator
2026-05-08Chaos drill 05 (CAF cert revoke) executed against production — sub-ms pub/sub propagationsecurity caf chaos-drills
2026-05-08ECS deploy workflow now pins all 8 provider API keys (closes silent-disable class)infra ecs ci-cd ingestors
2026-05-08Catalog ingestor coverage 7/7 → 8/8 — Groq closes the last drift gaprouter intelligence ingestors
2026-05-08Fix: model-performance persist no longer aborts with ON CONFLICT DO UPDATE errorrouter intelligence model-performance
2026-05-08Catalog ingestor coverage 5/7 → 7/7 — Perplexity + Moonshot complete the setrouter intelligence ingestors
2026-05-08Savings ledger avgValidity wired end-to-end (was hardcoded 0 across all paths)router intelligence savings-ledger quality-events
2026-05-07Auth middleware: fold tenant status into Redis key cache + hoist dynamic importapi auth redis
2026-05-07Budget middleware: 30s tenant-limits cache + Redis pipeline collapseapi budget redis
2026-05-07Cache hygiene: bound 3 unbounded caches + O(1) LRU evictionapi security router cache infra
2026-05-07Circuit breaker preserves forcedOpen on importFromRedis — closes cold-start breaker driftrouter circuit-breaker
2026-05-07Community-tier: collapse 5 sequential Redis ops into single pipelineapi community-tier redis
2026-05-07Removed 1,501 LOC of orphaned channel-routing and stub modulesrouting infra gateway cli
2026-05-07Governance endpoints: cap unbounded ?limit on lineage and sampling-auditsecurity api governance
2026-05-07Middleware: parallelize/pipeline 2 Redis hot pathsapi middleware redis agent-reputation
2026-05-07Misc: drop JSON.stringify token estimate + crypto.randomBytes for slug suffixapi community-tier provisioning
2026-05-07Model performance: batch persistToDb into single multi-row INSERTrouter intelligence persistence
2026-05-07Advisory-mode mTLS wiring on agent-mesh write routessecurity caf mtls agent-mesh
2026-05-07Redis failure-mode coverage in 3 middleware sites — class-of-bugs fixapi middleware redis
2026-05-07Semantic cache: partition entries by (tenantId + model) for O(partition) lookuprouter cache intelligence
2026-05-07Slack webhook: rate-limit BEFORE HMAC verificationsecurity api admin
2026-05-07Workspace agentId scoping + role-marker stripping in injected filessecurity workspace agents context-injection
2026-05-06Circuit-breaker reset() now broadcasts to peers — kills the cross-task force-open feedback looprouter circuit-breaker observability sentinel
2026-05-06Forensics panel 500 — listForTenant unwrapped pg.QueryResult.rowsapi caf observability dashboard
2026-05-06Sentinel recovery probe now bypasses model-list filter — closes the auto-recovery deadlock that PR #185 surfacedrouter sentinel observability
2026-05-06Cold-start timing wrapper dropped short-circuit Responses (5/14 5xx)api middleware observability
2026-05-05Layer 3 root-cause fix: DEFAULT_HEARTBEAT_EVERY was 600,000 minutes, not 600,000 msgateway infra
2026-05-05Cut CloudWatch Logs ingestion ~99% by clamping setTimeout overflow at the runtime layergateway infra
2026-04-30Explain narrator: BR uses its own router to write postmortems of its own routing decisionsrouter api sdk
2026-04-30Provider doctor: BR explains its own circuit trips instead of waiting for pagingrouter/intelligence ops mcp
2026-04-22BR Phase 1 — GET /v1/routing-stream (SSE push for routing decisions)router sse api
2026-04-22BR Tier 1 — god-mode audit table + CAF upsert-key cryptographic anchorcaf god-mode security-events
2026-04-22BR Tier 2 — SDK mesh enrollment + hostname-collision handlingcaf sdk-ts sdk-py mesh
2026-04-21BR deploy pipeline Phase A — 18 min → 6 min targetci-cd docker ecs vercel
2026-04-21Add Kimi K2.6 to Moonshot catalogmodel-router provider-catalog
2026-04-20Marketing site reskin — complete (25/25 pages on new design)marketing-site
2026-04-20Marketing site reskin — Vite + Tailwind v4 foundation + homepage portmarketing-site
2026-04-18ZTNA verifiability: build attestation, federated identity, reputation-coupled certscaf attestation agent-identity continuous-verification sdk-ts sdk-py docs
2026-04-16Self-soak test, streaming cascade stall detection, open-source prepsoak cascade ops cron monitoring governance
2026-04-12Agent Session Loop — the 'run' verb ships with multi-provider per-turn routingmodel-router agent-profiles mcp-gateway guardrails budget-enforcement session-store
2026-04-1058.3 → 78.5: Stochastic assessment remediation sprintsecurity testing operations intelligence documentation
2026-04-10Sentinel: 60-second deep completion probes + CloudWatch alarmsrouter observability
2026-04-07Agent Trap Defenses — 4 security fixes from DeepMind paper, 1 live bug patchedrouter memory security approvals
2026-04-07API Security Audit — 5 fixes from 53-finding automated test suiteapi router budget providers
2026-04-07Intelligent Memory Architecture — 8 foundation items + 6 governance innovations, 149 testsmemory governance security compliance intelligence
2026-04-01Wire all disconnected intelligence into production — 4 systems activatedranking-engine savings-tracker phase-predictor semantic-cache
2026-03-30Fix: 1200 false deprecation alerts eliminateddeprecation-detector model-intelligence-store provider-catalog
2026-03-30Unified Agent Identity System — 6 attributes, 1 middleware, 4000 tokensagent-context-injector heartbeat workspace reference soul skill memory
2026-03-28Brainstorm CLI Integration P1-P4: Project Memory, Task Telemetry, Registry, Block Syncmemory api mcp sdk-ts sdk-py rbac
2026-03-28Predictive Routing Intelligence — why THIS model for THIS request
2026-03-28Orchestration Trajectory Storage — the BrainstormLLM v2 training flywheeltrajectory-store api mcp sdk-ts sdk-py
2026-03-27Agent Reputation Scoring — 6-Signal Behavioral Tier Systemrouter api rbac
2026-03-27Auto-Failover Explanation — per-request hop tracking with recovery headersmodel-cascade circuit-breaker router
2026-03-27Tier 1 Semantic Response Quality Scorer — 5 dimensions in <5msquality-scorer router
2026-03-26Cost Prediction — Estimate Request Cost Before Executionrouter api mcp sdk
2026-03-26Explain Endpoint — One-Call Routing Decision Tracerouter api mcp sdk
2026-03-26Multi-Model Consensus: agreement-scored answer selection across 2-5 modelsconsensus-engine api-routes mcp-tools sdk-ts sdk-py
2026-03-26SSE Streaming Heartbeat — zero-cost connection keep-alivegateway streaming
2026-03-25Agent Discoverability Foundation — Fix the Front Doorapi mcp sdk-ts sdk-py intelligence
2026-03-25Community API Key — Zero-Setup Onboarding for Brainstorm CLIapi middleware db
2026-03-25Memory endpoints now accept API key auth with per-key isolationmemory auth
2026-03-25Model Recommend: data-driven model selection advisory for agentsmodel-bandit cost-optimizer performance-tracker auto-selector
2026-03-25Structured Error Recovery: Every error tells the agent what to do nexterror-recovery router intelligence
2026-03-24Delegated routing: Brainstorm CLI delegates model selection to BR's 13 intelligence systemsmodel-auto-selector model-bandit circuit-breaker ranking-engine performance-tracker
2026-03-24Distributed Mesh Execute — DAG-Based Workflow Orchestrationapi sdk-ts sdk-py mcp
2026-03-24Experiment Framework — A/B Test Models with Real Tasksapi sdk-ts sdk-py
2026-03-24Fleet Intelligence — Cross-Tenant Model Insights from All Brainstorm Instancesapi sdk-ts sdk-py mcp
2026-03-24Outcome feedback: every code compile/test/acceptance feeds Thompson samplingperformance-tracker model-bandit thompson-sampling
2026-03-24Parallel model comparison: fan same prompt to 2-6 models, compare quality/cost/latencymodel-router validity-scorer performance-tracker
2026-03-24Project Config & Activity — Per-Repository Settings and Collaboration Awarenessapi sdk-ts sdk-py mcp
2026-03-24Real-Time Telemetry SSE — live model health, budget alerts, routing decisionsrouter circuit-breaker budget-forecaster observability
2026-03-24Session State Persistence — Resume Brainstorm Sessions from Any Machineapi sdk-ts sdk-py
2026-03-24Task Pattern Memory — Institutional Knowledge of What Approaches Workmemory api sdk-ts sdk-py mcp
2026-03-23A2A Attack Detection — multi-hop injection chain trackingsecurity
2026-03-23A2A Public Facade & Behavior Certificatesapi security
2026-03-23Automated Red Teaming — 30+ adversarial vectors, 5 categoriessecurity
2026-03-23Behavioral Fingerprinting & Bot Detection — 5 signal dimensionssecurity
2026-03-23Canary / A-B Model Routing — traffic splits with winner detectionrouter
2026-03-23Compliance Dashboard — SOC2, audit viewer, data residency, policiesdashboard compliance
2026-03-23Custom Request Metadata — x-br-metadata headerapi observability
2026-03-23Self-Hosting Documentationdistribution
2026-03-23Evaluation Dashboard — dataset browser, run launcher, comparisondashboard evaluation
2026-03-23Evaluation Runs & Scoring Engine — 6 scorers, statistical comparisonevaluation
2026-03-23Evasion Technique Decoders — 7-stage normalization pipelinesecurity
2026-03-23Free Tier & Plan System — free/pro/enterprise with enforcementbilling
2026-03-23GenAI Entity Summaries — AI-powered 'Explain This' for dashboard entitiesdashboard agents security observability
2026-03-23Intent Detection Engine — 4 adversarial intent types with confidence scoringsecurity
2026-03-23MCP Server Vetting — trust scoring, tool manifest scanningsecurity mcp
2026-03-23Agent Mesh Graph — interactive topology visualizationdashboard agents security
2026-03-23Model Self-Defense — security-aware system instructions per trust levelsecurity
2026-03-23OpenTelemetry Trace Export — Gen AI semantic conventionsobservability
2026-03-23OWASP LLM Top 10 Coverage — automated compliance checksecurity compliance
2026-03-23Prometheus /metrics Endpoint — counters, histograms, gaugesobservability
2026-03-23Per-Request Provider Filtering — only, ignore, ZDRrouter
2026-03-23Quick-Start Wizard — 4-step onboarding with provider validation and security presetsdashboard onboarding
2026-03-23Shadow AI Cloud Connector — multi-source discovery with persistent baselinessecurity observability
2026-03-23Shadow AI Discovery — detect unknown models, providers, IP anomaliessecurity
2026-03-23SOC2 Audit Trail — hash chain, retention, CSV/JSON/CEF exportsecurity compliance
2026-03-23Virtual Model Variants — brainstormrouter/fast|cheap|qualityrouter
2026-03-22Audio API — TTS + transcription with provider routing and cost trackingapi router
2026-03-22Evaluation Datasets — DB-backed test case managementevaluation database
2026-03-22Moderations API — POST /v1/moderations with BR guardrail layerapi security
2026-03-22Dashboard Prompt Editor — visual template management with version historydashboard prompts
2026-03-22Prompt Evaluation Engine — dataset-based scoring with 4 strategiesprompts evaluation
2026-03-21Agent-as-Employee UX — trust shields, timelines, comparison, prominent kill switchdashboard agents
2026-03-21Analytics Charts — time range selector, sparklines, inline decision trace, circuit badgesdashboard observability
2026-03-21Dark Security Control Plane Theme — CrowdStrike-grade dashboard aestheticdashboard
2026-03-21Image Generation API — POST /v1/images/generations with provider routing and cost trackingapi router
2026-03-21Security Dashboard UX — threat banner, posture score, pipeline diagrams, governance urgencydashboard security
2026-03-20Agent Governance + Security Controls — First-Class Dashboard Governancedashboard agents security killswitch guardian policy-engine
2026-03-20Cost Attribution Insights -- Usage by Key and Agentusage-queries auth-routes sdk-ts sdk-py dashboard
2026-03-20Dashboard Design System + Real-Time SSE Pipelinedashboard observability api sdk
2026-03-20Dashboard Polish — Component Library + Cross-Page Consistencydashboard
2026-03-20Decision Trace — Full Routing Pipeline Visibility per Request
2026-03-20Routing Brain Dashboard + Home Page Live — 6 Intelligence Sections, 3 New Endpoints
2026-03-19Intelligence Phase 2: Benchmark Priors, Task Classification, Cross-Tenant Rankingranking-engine model-performance model-auto-selector benchmark-ingestor
2026-03-19Intelligence Phase 3: Live Ingestors, Deprecation Trends, Tenant Availabilitymodel-intelligence-engine deprecation-detector model-auto-selector model-router
2026-03-19Intelligence Phase 4 — Cost-Quality Frontier API + Public Site Visualizationsintelligence cost-optimizer ranking-engine sdk-ts sdk-py site
2026-03-18Crypto Agility Layer + Hybrid PQC TLS Foundationcrypto-agility tls pqc
2026-03-18Dead Code Removal + Config Drift Wiringcleanup config-drift
2026-03-18Operation Deep Audit — 6 Intelligence Gaps Fixed, System Score 69→81
2026-03-18MCP Capabilities Endpoint + SDK Methodsmcp sdk
2026-03-18Memory Extraction + Prompt Rewrite: Pipeline Activationmemory-extraction prompt-rewrite
2026-03-18PQC Docs + Security Page: Post-Quantum Positioningpqc docs marketing
2026-03-18Streaming Semantic Cache: Cache Hits for ~50% of Trafficsemantic-cache streaming model-router
2026-03-17AI-Native Surface: 65 MCP tools, ambient intelligence headers, and GET /v1/discoveryrouter auto-selector mni discovery error-recovery
2026-03-17Audit HMAC: Auto-Load Signing Key from Secrets Manageraudit-signer
2026-03-17Infrastructure Hardening: Cold-Start Elimination, SSE Sanitization, Atomic Budgetgateway guardian budget streaming
2026-03-17Redis CAS: Cross-Process Audit Chain Atomicityaudit-chain anomaly-engine mcp-governance
2026-03-17RMM Durable Memory: EFS + Postgres Fallbackrmm memory paths
2026-03-17Wire SavingsTracker + Extend Anomaly Scoring to API Key Callerssavings-tracker anomaly-engine model-router
2026-03-17Vanguard Sprint: SLM anomaly triage wired into mesh scoringanomaly-engine model-router caf
2026-03-16Brain Intelligence Plugin — Live model intelligence injected into every API completionplugins router completions mcp-bridge
2026-03-15Anthropic Messages API facade — native Claude SDK compatibilityapi router identity-bridge
2026-03-15MNI v2: Agent-Native Runtime Interface — Self-Awareness, Self-Healing Errors, Transparent Health
2026-03-14Guardrails V2: 8 Composable Checks, Pipeline Builder, 47 Testsguardrails pipeline-executor check-registry
2026-03-14Identity Bridge: Machine-to-Dashboard Account Linkingidentity auth provisioning dashboard
2026-03-13Digital Worker Manifest V2 — Workday for AI Agentsagent-profile-store agent-bootstrap auth-bridge dashboard
2026-03-13Rich 403s + Permission Introspection — Self-Healing RBAC for Agentsrbac api-key-management mcp sdk-ts sdk-py
2026-03-12Phase 012: Depth Audit — Crypto, Forensics, Connectors, MCP, Guardrails, Approvals, Memory, Cachecryptography forensics connectors mcp guardrails approvals memory semantic-cache
2026-03-11Budget Intelligence: Forecaster, Agent Budgets, and Alertsbudget-forecaster agent-budget-manager budget-alerts
2026-03-11Tool Firewall: Mask, Substitute, Downgrade Actions
2026-03-11Phase 011: The Obsidian Catch-Up — 15/15 Spec Areas SHIPPED
2026-03-11Scoped Kill Switches + Policy Dry-Run: Granular Emergency Controlskill-switch policy-engine governance
2026-03-10Agent Resource Management Convergence — 17 endpoints, 15 SDK methods, 8 MCP tools unifiedagent-profiles agent-bootstrap agent-delegation agent-lifecycle
2026-03-10Budget Controls & Kill Switch — Unified Governance MVPbudget-management kill-switch governance
2026-03-10Forensics & Replay: Full SDK + MCP + Dashboard Coveragerouting-replay forensic-snapshots mcp-tools sdk-ts sdk-py dashboard
2026-03-10MCP Control Plane — 43 Tools, Secretless Access, Full Operator Governancemcp-server mcp-gateway governance dashboard
2026-03-10Memory Runtime Foundation — 5 MCP tools, full SDK parity, search UImemory mcp sdk dashboard
2026-03-10Runtime Security Convergence — 4-Stage Pipeline with Guardrail MCP Toolssecurity guardrails mcp dashboard
2026-03-10Enterprise Documentation Consolidation — 5 Reference Pages, OAuth SDK Parityadmin-api scim oauth kms tenant-settings sdk-ts sdk-py mcp
2026-03-09SDK Parity Hardening — 4 resources, 15 methods, 8 MCP toolsconfig insights capacity aliases
2026-03-08MCP Gateway Fix Sprint — 4 Protocol-Breaking Bugs Eliminatedmcp-gateway mcp-governor mcp-client agent-identity sdk-ts sdk-py
2026-03-08Provider Health Alerts — Automated Outage Detection Across 247 Endpointsendpoint-sentinel model-auto-discovery platform-event-bus notifications
2026-03-07Graduated Trust Degradation — Continuous Agent Governanceanomaly-engine model-router agent-profiles caf-mesh anomaly-baselines
2026-03-05Admin Intelligence — Agent-First Business Managementplatform-event-bus beta-gate admin-api invite-codes slack-interactive
2026-03-05Agent Bootstrap — Zero-Human Onboarding in One API Callagent-profiles agent-budget-manager caf-mtls security-events
2026-03-04ARM: Agent Resource Management — The Workday for AI Agentsagent-profiles agent-budget-manager virtual-keys anomaly-kill-switch
2026-02-25Streaming Tool Firewall: 7-Check Pipeline, Zero Extra LLM Callstool-call-firewall streaming-guardrails
2026-02-22Virtual Key Vault: BYOK with AES-256-GCM Encryption and Zero-Downtime Rotationvirtual-keys provider-crud
2026-02-20CAF: Cryptographic Agent Framework with 5-Minute Certificatescaf-mtls caf-mesh spiffe anomaly-kill-switch
2026-02-19Relational Memory Manager: 4-Block Structured Context with Relevance Scoringrelational-memory memory-api
2026-02-18Guardian Intelligence: Sub-5ms Cost Prediction on Every Requestguardian cost-prediction usage-recording velocity-tracking
2026-02-16Universal Adapter Matrix: 5 Providers, 1 Interface, BigInt Precisionmodel-executor adapter-registry
2026-02-15Thompson Sampling: Principled Model Selection Across 247 Endpointsmodel-bandit model-performance-tracker
2026-03-26-budget-warnings-inband
2026-03-26-context-window-utilization
2026-03-26-degradation-ladder
2026-03-26-guardrail-transparency
2026-03-26-model-deprecation-warnings
2026-03-26-per-model-capabilities
2026-03-26-request-pattern-fingerprinting
2026-03-26-session-context-hints
2026-03-26-tool-call-success-tracking
2026-05-08-anthropic-catalog-ingestor
2026-05-08-cache-prefix-backfill-v51
2026-05-08-cache-prefix-nesting
2026-05-08-capacity-bump-and-mtls-strict
2026-05-08-doc-state-drift-gate
2026-05-08-drill-02-redis-auth-failure
2026-05-08-drill-03-provider-key-rotation
2026-05-08-drill-04-task-stop-mid-stream
2026-05-08-e2e-suite-green
2026-05-08-fix-job-queue-redis-duplicate-error-handlers
2026-05-08-load-test-r20
2026-05-08-openai-catalog-ingestor
2026-05-08-sandbox-savings-pollution
2026-05-08-three-more-ingestors
2026-05-10-279-auto-selector-gates-on-sentinel
2026-05-10-docs-trust-envelope-x2
2026-05-10-f1-disclosure-committee-hitl-gate
2026-05-10-fix-issues-272-273-274
2026-05-10-gauntlet-skeleton-alpha-5
2026-05-10-x2-event-taxonomy-expansion
2026-05-10-x2-pii-emission
2026-05-11-281-schema-v0.2-extensions
2026-05-11-alpha5-v0.3-migration
2026-05-11-envelope-precedence-docs-drift
2026-05-11-envelope-stress-tests
2026-05-11-envelope-synth-defensive-clamps