Releases & deprecations

Brand discipline + missing pages

• Rebrand to Vanguard Navy + Signal Gold + Bone palette across the catalogue. Violet/purple removed entirely.
• New pages: /categories, /categories/[slug], /cart, /checkout, /docs, /api-reference, /changelog, /legal/{privacy,terms,dpa}.
• Particle background now matches the OpsVanguard.com landing site (depth-layered, cursor parallax, tab-hidden pause).
• Header lockup mirrors the OpsVanguard.com mark: serif "OpsVanguard" + uppercase "AI Store" tagline.

Per-agent OpenAPI and seat-aware invoicing

• Every agent now publishes a dedicated OpenAPI 3.1 spec at /agents/{slug}/openapi.json.
• Invoice line items now include seat-level breakdown for Team and Enterprise plans.
• New webhook: subscription.seats.updated — fires on add/remove of seats mid-cycle.

PQC key rotation cadence shortened to 24h

• ML-KEM-768 public key now rotates every 24 hours (was 7 days). Clients with cached keys will fall back gracefully via /api/v1/pqc/public-key.
• Documented the harvest-now-decrypt-later threat model in the API Reference > Encryption section.

Streaming invocations and idempotency keys

• Agents now support streaming responses via Accept: text/event-stream.
• Idempotency-Key header on POST /agents/{slug}/invoke deduplicates retries for up to 24 hours.
• Customer-managed KMS available on Enterprise plans (AWS, GCP, Azure).

EU-Frankfurt residency by default

• New customers default to EU-Frankfurt. US-East available on request via support.
• Subprocessor list moved to a versioned page; existing customers receive 30 days notice on changes.

Public launch

• Initial public release with 20 production-grade AI agents across cybersecurity, DevOps, data privacy, code security, and business intelligence.
• PQC envelope encryption (ML-KEM-768 + AES-256-GCM) on all UI ↔ API traffic.
• GDPR, SOC 2 Type I, and TLS 1.3-only at the edge.