Skip to content

koinon 26.11.4

Answers with recorded evidence

The assistant selects exact source passages and verified dataset values. The server validates that selection before publishing the response and its SSE events in one transaction. A successful retrieval alone cannot authorize unrelated model prose. When the selected knowledge does not support an answer, the assistant asks the user to refine the question or choose another source.

Each published answer records its selected evidence, immutable source revisions, native result hashes and final output hashes. The append-only receipt is available in the answer audit and typed SDKs. Exports, shared conversations, memory and proposed knowledge updates repeat the relevant output and permission checks. Earlier unsealed responses keep their historical records but are not treated as verified assistant knowledge.

This format supports exact quotations and eligible query values. It does not claim unrestricted factual synthesis, verified image understanding from file hashes or control over an external MCP client's final prose. Read knowledge-only responses for the supported evidence and upgrade behavior.

Administrator communications without directory synchronization

An installation operator can configure an explicit, encrypted delivery contact for an administrator when optional directory synchronization is unavailable. The contact binds to the existing verified identity and does not create an account or grant a role. Configuration requires a fresh identity observation, an explicit expiration and the dedicated operator database permissions. Expiration, revocation and identity changes prevent further use.

The native operator command can enqueue a diagnostic through the regular notification workflow. Reusing its operation identifier does not create a second message. Existing welcome attempts with unknown outcomes are preserved. A configured sender, provider acceptance and delivery to a mailbox remain distinct observations. Read operator delivery contacts before provisioning this path; ordinary-user invitations retain their directory requirements.

Knowledge management through MCP

External assistants can create folders, update catalog metadata, move entries, archive and restore supported entries, and inspect processing availability through fixed tools. They use the connected user's current permissions and the canonical service preconditions. Catalog organization does not bypass the separate human review required to publish generated knowledge or approve a file upload.

See external-agent management for tool scope, concurrency and uncertain outcomes. Actual Claude or ChatGPT account linking remains a deployment-specific verification step.

The navigation bar separates branding, primary navigation and account controls. A single available organization no longer shows an unnecessary selector. Customized sign-in screens retain the footer attribution without repeating it beside the main logo.

The notification inbox applies unread and type filters immediately. Marking an item read refreshes the navbar count; a failed count request is shown as unavailable instead of zero. Desktop and mobile layouts share the same controls and accessible states.

Administrators can inspect bounded platform-health observations and product information without exposing credentials. Readiness, index availability and provider connectivity are reported separately; a configured service does not imply a completed user journey.

Upgrade

Use matching 26.11.4 distributions with official pyfly 26.10.32. Follow the migration guide to apply native revisions koinon_0038_operator_contacts and koinon_0039_answer_release, then verify the dedicated runtime and operator grants. Preserve the existing installation plan and use the documented recovery procedure for an interrupted first start.

Updating the runtime does not replay welcome emails, publish pending knowledge, enable optional directory access or register an external application automatically.