AxonFlow v11.4.0 Release Notes
v11.4.0 adds a verified website-to-Hosted account path and the foundations for governed customer actions. The new action capability remains dark or sandbox-only. This release does not authorize a production provider action, enable provider Send, or claim a customer outcome.
What changed
- Hosted acquisition: consuming a one-use email verification creates the tenant and owner. A tenant-bound Portal session can then start Checkout, complete onboarding, and link a client or device. A browser return alone never grants paid access; signed completion and the tenant-scoped billing record control entitlement.
- Bounded action foundations: versioned capability discovery, policy and approval checks, evidence, durable reservation, delivery, and reconciliation contracts are available for sandbox validation. Customer authority enrollment, live capability registration, and provider Send remain disabled.
- Advisory investigations: a tenant-scoped, read-only registry and synthetic payment-exception, support-refund, and failed-disbursement workflows exercise the evidence path with fake provider actions. The Portal shows usage only when durable events exist; empty tenants do not receive invented usage.
- Isolation and refusals: Hosted sign-in, paid entitlements, revocation, deletion, metering, and replay remain tenant-bound. Structured 402 and 429 responses are preserved. Cached capability replay requires fresh policy authorization, and advisory text cannot turn unsourced or unknown facts into an approved action.
- Community: the new Enterprise capability route remains unavailable with an explicit 501. Existing Community client and workflow behavior remains compatible; additive core schema does not enable an Enterprise capability.
Deployment and migration
Apply additive core migrations 192–194, Enterprise migrations 162–165, and Community SaaS migrations 199–204 before starting the new Agent tasks. These changes enforce tenant row-level security where applicable. Retain the prior database snapshot as the rollback anchor; an image rollback does not reverse schema migrations.
Agent /health now returns HTTP 503 until migration checks and route registration finish, then returns 200 when the Agent is ready to serve. Migration ledger or execution failures stop startup instead of reporting an early healthy state. Compose health budgets were extended for that readiness sequence.
Both AxonFlow-operated Community and Production stacks run v11.4.0. The Community Portal serves the public signup form and the deployed services register the signup and tenant-bound Checkout routes. This release review made no signup or payment request, so it does not claim that a purchase completed or that the offer is available to every visitor. The release does not turn on live financial execution. Customer-specific acceptance, an enrolled authority, and a separately reviewed activation gate are still required.
Client versions
The v11.4.0 platform tag and Community release are public. No SDK or plugin minimum floor changed in this platform release. The SDK feature train remains 9.5.0 for Go, Python, TypeScript, and Java, and 0.12.0 for Rust; the separately published client patches below were public before the platform tag. This at-tag snapshot was frozen from exact public-registry and GitHub-release readbacks on 5 November 2026.
| Client | Version | Notes |
|---|---|---|
| Python, TypeScript, Go, and Java SDKs | 9.5.1 | Public and independently read back before the platform tag. |
| Rust SDK (preview) | 0.12.1 | Public and independently read back before the platform tag. |
| OpenClaw plugin | 2.10.1 | Historical pin for existing non-production reproductions only; no new-install or production recommendation. Published 2.10.3 remains under a security installation hold; 2.10.4 is tagged but not yet on npm or ClawHub. |
| Claude Code plugin | 1.14.0 | GitHub release public before the platform tag. |
| Cursor plugin | 1.10.0 | GitHub release public before the platform tag. |
| Codex plugin | 1.10.0 | GitHub release public before the platform tag. |
| Claude Desktop proxy | 0.4.1 | Unchanged. |
| n8n node | 1.2.1 | Unchanged. |
| Google ADK plugin | 1.4.0 | Already public; no new artifact in this train. |
| LiteLLM integration | 1.1.1 | PyPI release public before the platform tag. |
For versions available now, use the current client-version manifest and the installation pages. Later client patches must not rewrite this historical at-tag record.
Verify after upgrade
Confirm Agent and Orchestrator report v11.4.0, service counts are healthy, the live signup/Checkout posture matches the intended launch control, and provider Send remains disabled. Exercise a supported old client and a newly published client against the deployed policy path, including structured refusal handling, before expanding a cohort. Keep provider Send disabled until the customer-specific acceptance gate is complete.
The Community source release targets the independently reviewed Community mirror of the tagged Enterprise source.
