Ujex Changelog

2026-06

• Server-side tool policy now runs inside tool invocation.
• Tool credentials stay server-side and are injected only during invocation.
• Agent-driven sends and tool calls require a stable session ID.
• Attachment presence marks inbound sessions untrusted until richer parsing ships.
• Evidence export and offline verification remain the launch trust proof.

2026-04

• Public launch copy narrowed to Inbox, Approvals, Evidence, Budgets, Provenance, and Tool Authorization.
• Advanced networking, old memory aliases, and store distribution moved out of the first-run story.