Changelog

What shipped, newest first. Everything here is live today, not on a roadmap. The runtime's latest release is mergen-server 1.7.5 (October 19, 2026).

October 2026

  • ✓Offline Policy Limit: your organization sets how long a machine may go without checking its policy; past that, every agent action but a read is held
  • ✓Recommended Rules From Your Denials: a command people denied every time is offered as a block rule, checked against what was approved
  • ✓File Rules Cover Agent Edits: a rule naming files also governs the agent’s own file edits, not only shell commands
  • ✓Built-in Checks: Ask or Log Only: eight built-in checks can log instead of asking; nothing turns off silently
  • ✓Draft Rules, Previewed: a drafted rule shows what it would have done to the repo’s last 1,000 actions before you save it
  • ✓Agent Containment: Claude Code’s sandbox, set up by Mergen: allowed hosts, write scope, and no reach into the gate
  • ✓Holds Survive a Restart: a pending shell hold is checked again after a restart instead of being denied
  • ✓Scoped Exceptions in the Console: every signed, path-scoped carve-out in force across the fleet, listed read-only
  • ✓Session-Aware Deletes: an agent removing a scratch directory it created itself no longer waits for you
  • ✓Acknowledgeable Startup Warnings: mergen runtime warnings ack, from a real terminal only, so an agent can’t quiet them

September 2026

  • ✓Edit-Time Change Gate: blocks a hardcoded secret, and holds a removed auth check, a deleted test, a dropped CI check, or an edit to the hooks and settings that govern the agent, before the write lands on Claude Code and Windsurf (in Cursor and VS Code, reverted just after)

July 2026

  • ✓My Organization: org-wide cloud surface at mergen.app
  • ✓Runtime Fleet: health, active policy version, queue depth
  • ✓Runtime Credentials: revoke a single laptop without revoking the whole team license
  • ✓Usage Analytics: allow / block / held, synced from every runtime
  • ✓Policy Publishing & Versioning: draft → review → publish, with rollback
  • ✓Visual Rule Editor: build policy rules without hand-writing JSON
  • ✓Staged (Canary) Rollout: ship a policy to a subset of runtimes first
  • ✓Fleet-wide Approvals: every resolved hold, org-wide and auditable
  • ✓Live Approvals Inbox: approve or deny a held action from the console, not just Slack
  • ✓Environment Detection: runs in Docker, Dev Containers, Codespaces, Gitpod, K8s