v3.96.0

3.96.0 (2026-07-03)

Features

People tab redesign

• Requirements now shown as per-person status columns — Policies, Training, HIPAA, Device, Background check — with clear Done / Missing states, replacing the old combined progress bar
• Per-employee 2FA status: pick which connected integration (e.g. Google Workspace) reports 2FA, and every person gets a Done / Missing / Not provided status
• Toolbar reworked: filters behind a Filters button with removable active-filter chips; sync & 2FA sources configured from a new Sync settings popover
• Always-visible horizontal scrollbar on wide tables; improved responsiveness and screen-reader labels throughout

Bug Fixes

• people: consistent error handling on the 2FA source endpoints
• people: reliable dismissal for selects inside toolbar popovers

v3.95.2

3.95.2 (2026-07-02)

Bug Fixes

• github-integration: use concurrent mapping for branch protection checks (5b68642)
• todo: create a ticket in team cs "[feature request/ux] - policy de (2a6b892)

v3.95.1

3.95.1 (2026-07-01)

Bug Fixes

• evidence-export: raise trigger task duration ceiling to prevent timeout (5375032), closes hi#volume

v3.95.0

3.95.0 (2026-07-01)

Bug Fixes

• frameworks: reject null fields and empty payload on custom framework update (e5f847b)
• frameworks: reject whitespace-only custom framework name (8db8ac5)
• frameworks: trim custom framework name/description in update DTO (dcf3dc1)
• integrations: use catalog-defined field names for fivetran basic auth (6050902)
• tasks: bound sanitized inputs check to prevent timeout on manual run (070a964)

Features

• frameworks: allow editing custom framework name and description (4e3f9ac)

v3.94.2

3.94.2 (2026-07-01)

Bug Fixes

• auth: honor explicit ?inviteCode= before the offboard guard on the root page (ab7ba22)
• auth: let invite flows take precedence over the offboard guard at /setup (afb759e)
• auth: stop offboarded users from looping into a spurious new org (2aa20e6)
• trust-portal: bound ISO cert regex so a number can't match a longer one (514e0e5), closes #3318
• trust-portal: sync iso 27001 certification mapping with vendor-risk task (9f944a0)
• trust-portal: tighten ISO cert badge matching to require the ISO prefix (3b426f7), closes #3315 #3315

v3.94.1

3.94.1 (2026-07-01)

Bug Fixes

• self-heal: refresh manifest cache before persisted re-run (3783ed8)

v3.94.0

3.94.0 (2026-06-30)

Bug Fixes

• devices: address cubic review on device-import display + sync definitions (dda64db)
• devices: address cubic review on the device-import display PR (#3308) (9056d1b)
• devices: second cubic pass — JumpCloud error handling, a11y, untracked rendering (ea93f29)
• isms: resolve back nav, approver/owner display, party tags, and status formatting (c9a6697)
• pentest: gate initial free credit to new (un-onboarded) orgs only (199e890)
• people: lock sync-source dropdown while disabling auto-sync (541a72f)
• self-heal: address cubic — validate task org on reveal/rerun + held error-runs keep task pending (3cecc79)
• self-heal: reveal also syncs the task status (cubic P1) (9bbf38b)
• self-heal: reveal task-sync only flips ACTIVE statuses (cubic P2) (5e3c6e3)

Features

• devices: show integration-imported devices in People tab + Intune/JumpCloud device sync (923a9e9)
• pentest: auto-grant one free pentest credit to new organizations (a5f815f)
• people: add "Don't auto-sync" option to employee sync source (ae88ec6)
• self-heal: add /reveal endpoint — persist the real fail (customer-side / finding) (e2f1fc0)

v3.93.1

3.93.1 (2026-06-29)

Bug Fixes

• api: clear offboardDate when removing member with skip offboarding (99181db)
• auditor: tighten context generation prompts and feed complete vendor list (79be921)
• bug-todo: address cubic review (27f605d)
• cloud-security: drop unsupported temperature param from auto-fix model calls (e94bcd6)
• policies: send re-acknowledgment emails when policy is updated (b24884e)
• todo: address cubic review (e0f8471)

v3.93.0

3.93.0 (2026-06-29)

Bug Fixes

• policies: preserve acceptances when republishing unchanged policy in review (83915c2)
• self-heal: anchor status-string parse + reuse decideRunStatus in throw path (da2e923)
• self-heal: cubic — broaden HTTP status parse + held failures block 'done' (425ecb6)
• self-heal: cubic backlog — empty-msg mask, string status, bounded queue, throw→inconclusive (59f8a63)
• self-heal: held runs store failedCount 0 + document done-on-held decision (95b6f88)
• self-heal: hide held (inconclusive) runs from the customer task UI (a24b9af)
• self-heal: mark manual held dynamic runs inconclusive (consistent w/ scheduled) (333f753)
• self-heal: only surface checks whose latest run is still inconclusive (8fdf5e1)
• self-heal: redact quoted JSON keys/values + short secrets (cubic P1) (98201f1)
• self-heal: redact quoted secret values containing spaces (cubic P1) (ae4cc47)

Features

• api: add inference.net Catalyst tracing for LLM observability (4f4c6f5)
• integration-platform: failure classifier for the self-heal layer (487a4d9)
• integration-platform: hold our-side dynamic failures (manual run path) (b374c89)
• integration-platform: hold our-side dynamic failures (scheduled run path) (b191fcc)
• integration-platform: inconclusive run status + failure partition (aa1bba8)
• integration-platform: inconclusive-runs queue endpoint for the self-heal agent (32e0295)
• integration-platform: mark held dynamic check-runs as inconclusive (59c879e)
• integration-platform: version + rollback for dynamic check edits (7f7eb49)
• self-heal: include the evidence-task title in the agent queue (a14bd87)
• self-heal: persisting re-run endpoint so fixed checks flip customers to green (63fb53a)

Performance Improvements

• db: use composite (checkId, createdAt) index for check version history (713fe32)

Device Agent v1.0.8 (Staging #98)

Device Agent v1.0.8 (Staging #98)

Environment: Staging
Portal: https://portal.staging.trycomp.ai

Downloads

• macOS: Download the .dmg file below (universal binary, Apple Silicon + Intel)
• Windows: Download the .exe installer below
• Linux: Download the .AppImage (portable) or .deb (Debian/Ubuntu) below

What's included

• Disk encryption check (FileVault / BitLocker / LUKS)
• Antivirus detection (XProtect / Windows Defender / ClamAV + AppArmor/SELinux)
• Password policy enforcement (minimum 8 characters)
• Screen lock verification (5 minutes or less)
• Auto-remediation for fixable settings with guided instructions

Installation

1. Download the installer for your operating system
2. Run the installer and follow the prompts
3. Sign in with your Comp AI portal credentials
4. The agent will run in your system tray and check compliance automatically