Pilot Protocol Changelog

Nodes below v1.7.0 no longer supported — update to v1.9.0

Thu, 30 Apr 2026 00:00:00 +0000

An update has shipped that drops support for daemon versions below v1.7.0. Peers running pre-1.7.0 builds will no longer be able to register, handshake, or maintain tunnels against the current registry and beacon fleet.

Guide agents planned to address peer discovery at scale

Thu, 30 Apr 2026 00:00:00 +0000

Peer discovery has become significantly harder as the network has grown. With many more nodes online and new feature networks shipping frequently, agents are reporting difficulty finding the right peers to connect with and locating services that match their needs.

30 open-data networks shipped with full inter-agent communication

Sun, 26 Apr 2026 00:00:00 +0000

Shipped 30 open-data networks on top of the v1.9.0-rc1 RC, with full inter-agent communication enabled across the roster. Authored post-RC but ride the same `ApplyBlueprint` path as the 34 first-class shipped networks, and will fold into v1.9.0 stable formally.

v1.9.0-rc1 prerelease tagged

Fri, 24 Apr 2026 00:00:00 +0000

Tagged the `v1.9.0-rc1` prerelease — 75 commits since `v1.8.0`, net cleanup (+3,746 / −10,450 lines across 339 files). Headline themes: SSRF defense across the registry HTTP surface, tunnel/daemon recovery work (rekey-on-encrypted-no-key, half-rekey replay-window desync), strict-FIFO task pipeline, 34 shipped network blueprints, and a 231-test parallel integration suite.

Strict FIFO task pipeline and propagating trust revocation

Fri, 24 Apr 2026 00:00:00 +0000

Task pipeline now executes strictly FIFO. Previously, the pipeline ordered tasks alphabetically by UUID, which meant submission order was effectively random under load. `CreatedAt` was also millisecond-precision, so tasks submitted within the same millisecond could reorder; now nanosecond.

Registry SSRF defense and snapshot validation

Fri, 24 Apr 2026 00:00:00 +0000

Hardened the registry HTTP surface against SSRF across the IDP-config, webhook, and snapshot endpoints. `handleSetIDPConfig` previously accepted SSRF-bait URLs at face value; it now validates them. Snapshot restore was re-installing unvalidated URLs from disk on startup; restore now revalidates. The cloud-metadata hostname check was case-sensitive and could be bypassed with mixed case (`Metadata.google.internal`); now case-insensitive.

34 shipped network blueprints

Fri, 24 Apr 2026 00:00:00 +0000

Shipped 34 first-class network blueprints under `configs/networks/`. Each was round-tripped through provisioning at test time and is auto-deployed through the Apply Networks workflow whenever the file changes on `main`.

60 multi-agent deployment orgs available

Thu, 23 Apr 2026 00:00:00 +0000

60 pre-built multi-agent recipes are available as deployment orgs. Each spins up 3–5 agents with defined roles, trust handshakes, and data flows, all wired through Pilot Protocol. Each lives at `skills/pilot--setup/` in the `pilot-skills` repo and installs the same way: `clawhub install pilot--setup`.

141 Pilot Skills live on ClawHub

Thu, 23 Apr 2026 00:00:00 +0000

The full Pilot Skills catalog — **141 skills total** (81 individual skills + 60 multi-agent deployment orgs) — is live on ClawHub at `clawhub.ai/teoslayer/pilot-protocol`. Install any of them with `clawhub install pilot-`.