AxonFlow v11.3.7 Release Notes
v11.3.7 is the current v11.3 platform patch. It reconciles the client versions advertised by Agent and Orchestrator after the Hosted Starter production rollout. The release remains backward compatible and does not by itself enable paid enforcement, a public cohort, or financial execution.
Read the v11.3.0 release notes for the complete Hosted Starter and outcome-workflow feature set. The patches from v11.3.1 through v11.3.7 are cumulative.
What changed in v11.3.7
- Agent and Orchestrator now recommend the public OpenClaw 2.10.1, Claude Desktop 0.4.1, and Google ADK 1.4.0 artifacts from the same shared compatibility registry.
- Customer-facing OpenAPI examples use that canonical compatibility map, with regression coverage keeping both health planes in lockstep.
- Minimum client versions, request handling, authorization, billing behavior, database schema, and tenant-isolation behavior are unchanged from v11.3.6.
The v11.3.7 compatibility metadata records the public artifacts verified at release time. A subsequent review found that OpenClaw 2.10.1 can lose an independently configured high-risk approval when AxonFlow returns redacted parameters. The 2.10.2 fix is merged but is not yet available from npm and ClawHub. Keep the paid cohort disabled and do not start new production OpenClaw deployments until 2.10.2 is published and the platform recommendation is updated.
Cumulative v11.3 patch train
- v11.3.1: completed the first Hosted RLS and CloudFormation rollout corrections.
- v11.3.2: preserved tenantless control-plane audit rows under Hosted
FORCE ROW LEVEL SECURITYwithout weakening tenant-scoped policies. - v11.3.3: fixed HTTP connector query preservation and idempotent PUT/DELETE transient-status retries, with attribution to Ajeya Krishna's Community contributions.
- v11.3.4: upgraded
go-joseto remediate CVE-2026-116587 and strengthened real-stack connector validation. - v11.3.5: corrected clean Hosted schema verification and fresh-stack database-role bootstrap behavior.
- v11.3.6: synchronized the built-in Stripe webhook source allowlist with Stripe's published delivery addresses and tightened ordered paid-entitlement activation checks.
- v11.3.7: reconciled the public client compatibility map and OpenAPI examples.
Production posture
Both AxonFlow-operated production stacks run v11.3.7 with completed service rollouts. Hosted billing status and Checkout are deployed with the reviewed non-zero Starter limits, the case-workflow service is healthy, and production tenant-isolation probes pass through the real application role.
The paid gate remains off with a zero-percent cohort and no cutoff. A real USD 9.99 production canary, released-client verification on the paid tenant, Portal cancellation/refund proof, and entitlement-removal proof remain separate launch approvals.
Client versions
The client set recorded by v11.3.7 is:
| Client | Version | Notes |
|---|---|---|
| Python, TypeScript, Go, and Java SDKs | 9.5.0 | No SDK release required. |
| Rust SDK (preview) | 0.12.0 | No SDK release required. |
| OpenClaw plugin | 2.10.1 | Public at release time; hold new production deployment until the 2.10.2 security patch is published. |
| Claude Code plugin | 1.13.0 | No plugin release required. |
| Cursor plugin | 1.9.0 | No plugin release required. |
| Codex plugin | 1.9.0 | No plugin release required. |
| Claude Desktop proxy | 0.4.1 | Published and byte-verified. |
| n8n node | 1.2.1 | No integration release required. |
| Google ADK plugin | 1.4.0 | Published and byte-verified. |
| LiteLLM integration | 1.1.0 | No integration release required. |
Verify after upgrade
- Confirm every deployed service reports v11.3.7 and reaches its expected running count.
- Confirm Agent and Orchestrator publish the same client compatibility map.
- Confirm billing routes are registered while the paid gate remains safe-off.
- Confirm an old supported client and the released raw API path can obtain a valid policy decision.
- Confirm RLS isolation through the real application role and retain the rollback snapshot and previous digest set.
The immutable Community release is available on GitHub.
