Tags, not promises.

A second runner and saved points you can name: ks run --agent --harness codex starts an agent on Codex CLI with your own OpenAI key, ks session harness reads or switches a paused session's runner and ks session brief prints the handoff brief the new runner received, and ks session checkpoints marks which saved points are usable and their position, newest first.

Editorial release summary. Historical signatures authenticate the original signed messages, not this summary.

Cruise jobs the service drafts from your files: ks cruise draft create sends a folder, an archive, one of your sessions or an agent's proposal, ks cruise draft show prints what the service found and the digest the client computes (with --verify, every digest computed again from the draft's archive), and ks cruise draft approve runs the draft once you confirm that digest. The same drafts are made in the browser console.

Editorial release summary. Historical signatures authenticate the original signed messages, not this summary.

A question asked of a connected agent can be taken back: interrupting ks agent ask while it waits (Ctrl-C) now cancels the question, as the browser console's Cancel does, and the line says whether it was cancelled, the reply had already arrived, or the cancel was refused or could not be confirmed. A second Ctrl-C stops at once.

Editorial release summary. Historical signatures authenticate the original signed messages, not this summary.

Parity with the browser console: ks agent ask asks one of an agent's connected advisers and waits for the answer, ks agent history prints an agent's conversation in any session state, ks run --agent --model starts an agent on a model the service offers and ks session model reads a session's model or changes it while the session is paused, ks cruise models says which models are offered, a connection with no limits named is sized by the service for one turn of the adviser's model and the answer prints the resolved limits, and every session and agent state is printed as the console's word beside the raw state.

Editorial release summary. Historical signatures authenticate the original signed messages, not this summary.

The terminal app is redesigned so every screen reads clearly: a paused session, a session out of credit, an agent that needs attention and a permission request each get their own titled card, text wraps instead of being cut off, and an error says what went wrong and what to do next. Stopping an agent or deleting a session is a yes or no confirmation, and ks session delete with no flags now shows the deletion plan first.

Editorial release summary. Historical signatures authenticate the original signed messages, not this summary.

New agent names are checked before anything is sent: ks run --agent, ks agent create, ks agent rename and the app now refuse at once a name the service would refuse. A name starts with a letter and uses only letters, digits, dashes and underscores, up to 48 characters.

Editorial release summary. Historical signatures authenticate the original signed messages, not this summary.

The terminal app is easier to read and to use: colour shows each agent's state, the input sits in a frame with a working indicator, commands are suggested as you type, and every command shows its help inside the app, for example /agent --help or /help agent. ks kill on an agent session now shows a readable deletion plan and deletes it once you type the session's name, and a ks command typed into an agent's input is no longer sent to the agent.

Editorial release summary. Historical signatures authenticate the original signed messages, not this summary.

Work with supervised agents from your terminal: running ks opens an app where you give agents instructions, see what happened while you were away, switch between agents and answer what they ask. Cruise jobs now run from the terminal from init to an applied result, with clearer statuses and help across client versions v0.1.8 to v0.1.19.

Editorial release summary. Historical signatures authenticate the original signed messages, not this summary.

Drive real fleet sessions from your own machine: ks run, kill, wake and meter now work against the hosted service after ks login. Local bench behavior is unchanged.

Editorial release summary. Historical signatures authenticate the original signed messages, not this summary.

dated public release summary

Sessions stay isolated per account on every path that adopts them: the ownership check now holds under the checkpoint portability test. Nothing changes in how you use ks.

Editorial release summary. Historical signatures authenticate the original signed messages, not this summary.

Your sessions belong to your account: an opaque owner id and signed assertions tie every session to its owner, so one account cannot touch another's sessions. Existing unowned bench sessions keep working.

Editorial release summary. Historical signatures authenticate the original signed messages, not this summary.

A maintenance release: one measurement baseline was re-ruled, a wording error in the claims file was corrected, and formatting was tidied. Nothing new to run.

Editorial release summary. Historical signatures authenticate the original signed messages, not this summary.

The daemon refuses to run when its database has been swapped underneath it, so a session is never served without its state. Release truth becomes machine-readable: per-gate status and open findings publish as JSON with every release.

Editorial release summary. Historical signatures authenticate the original signed messages, not this summary.

Model calls are never served unmetered: the gateway notices a replaced database, reopens it, and refuses calls rather than billing blind, and each call is billed at most once, enforced by the ledger. ks meter gains a --db flag and honest exit codes.

Editorial release summary. Historical signatures authenticate the original signed messages, not this summary.

Five wrap-up defects fixed under the patch law, each with a reproduction run red then green and a permanent guard. No new claims: nothing here promises anything the first release did not already prove.

Editorial release summary. Historical signatures authenticate the original signed messages, not this summary.

The first release: run an AI agent inside a microVM, checkpoint it, kill it mid-task, and resume it seconds later in the same session with its memory intact. Fork and replay complete the five verbs.

Editorial release summary. Historical signatures authenticate the original signed messages, not this summary.