Changelog

The partner program is in private beta. This page records changes that affect partner integrations.

2026-08-20

Sign-in SDK and client metadata documents

• Added Client Identifier Metadata Documents (CIMD) as a rolling registration and admission path for host-consistent clients.
• Added the ai-passport-signin package with browser, React, and server helpers.
• Added official light and dark sign-in button assets and the approved mark.
• Added agent-facing documentation and the /llms-install.md install prompt.

Compatibility contract

The /v1 contract can grow without a version change. Treat these changes as additive and non-breaking:

• New endpoints
• New optional response fields
• New error strings
• New item status values

Clients shall tolerate all four changes. Ignore fields you do not use. Keep an unknown error or status visible in diagnostics.

Removing a field, requiring a new input, or changing existing behavior is a breaking change. We give private-beta partners direct notice before one ships.

Quota changes are operational changes. Read current dials from GET /partner/v1/me and honor Retry-After.

2026-08-14

Hosted connector credential entry

• Added POST /partner/v1/connectors/connect-key.
• Provider API keys now go directly to an AI Passport-hosted page.
• Added durable attempt budgets and a 10-minute ambiguity horizon.

Partner hardening and lifecycle signals

• Added bounded refresh response recovery and token-family reuse handling.
• Added RFC 8936 standing-event delivery at POST /partner/v1/events.
• Added request IDs, retry headers, named rate limits, and content-free signals.
• Accepted ADR-0032 and ADR-0034 after the release gates passed.

ADR-0034 partner workspaces and Passport Link

• Added Passport Link ticket mint and redemption.
• Added REST and MCP workspace operations.
• Added workspace quotas, retention, export, deletion, and owner visibility.

2026-08-13

ADR-0032 owner controls

• Added one owner action to forget all memories from one partner source.
• Preserved the action after the owner severs the partner delegation.

2026-08-12

ADR-0032 phases 2 through 5

• Added connector listing and connection initiation.
• Added source-attributed memory ingestion.
• Added pass-governed recall and partner documentation.

ADR-0032 phase 1

• Added managed partner records and hashed API keys.
• Added attested net-new provisioning and delegated token pairs.
• Added creation notices, owner recourse, and one-tap delegation severing.