# What’s new — selected highlights

This is a curated set of user-facing highlights, not a complete commit changelog. UI highlight versions are not protocol or package versions.

This page lists only changes that are present in the loaded cockpit and lead to a real guide, inspectable object, or restartable Open MCT tour. Planned work belongs in the roadmap or issues, not in shipped history.

## 0.8.1 — A friendlier circuit

- Start now exposes working local notes and a local address book, without pretending to be a public chat room.
- Sign-in, same-browser resume, encrypted identity export/import, and optional GitHub recovery explain their separate persistence boundaries.
- The shell and cockpit share one unlocked Self session. A view being destroyed no longer logs out the other surface.
- A read-only health observer updates the service strip and Cloudflare circuit labels. Paused APIs stay disabled; configuration never becomes a claim of personal persistence.
- First visits are not interrupted by update announcements. Returning visitors can dismiss highlights, see the badge update across tabs, and reopen them deliberately.
- The same stable cockpit gets PCB faceplates, larger newcomer controls, mobile layouts, and reduced-motion styling.
- Every public guide gains a current, reproducible browser picture. Existing conceptual diagrams remain, and nested historical images resolve correctly.

Read [Welcome](first-flight-for-everyone.md), [Resume](resume-your-cursors.md), or [Chat](chat-with-a-friend.md). The underlying deployment's safety gates and **NOT E2E YET** boundary remain in place.

## 0.8 — SQLite-owned Cursor Machine proof

- Added indexed batch claiming, worker and effect leases, explicit serializable continuation state, capability-gated scheduling, duplicate-safe results, and receipt-driven wakeups.
- Added transactional Linda assertions/interests, checkpoints, outbox effects, and rollback across coarse executor batches.
- Added the official SQLite Wasm dedicated Worker with memory, OPFS, and SAH-pool reporting, local `ATTACH`, deterministic functions, SQLite read-only authorizer enforcement, and bounded RPC/query budgets.
- Added the restricted `watch-party-presence/v0` Lua source profile and real watch-party scheduler demo. Source and compiled IDs remain separate; source grants no execution authority.
- Added Nelua-generated C and scalar/SIMD Wasm scheduler-packet execution behind frozen JS-compatible fixtures and a parity gate. Rust issue #50 remains independent.
- Added the **Lua + SQLite Machine Lab** and standalone proof entry, showing the compiled graph, SQLite version, leased assertion, and transactional outbox readback.
- Kept Cap'n Web as live pipelined acceleration and Durable Object SQLite as a bounded semantic sync target—not continuation authority or page/WAL replication.

Read [SQLite + Lua Cursor Machine](sqlite-lua-cursor-machine.md), [Machine Lab](cursor-machine-cockpit-lab.md), [SQLite Body and Lua Programs](sqlite-body-and-lua-programs.md), and [Nelua portable core](nelua-wasm-core.md).

## 0.7.1 — Start, Chat, and local peer RPC

![The Start machine connects a local Self to chat, mailboxes, peers, and optional durable infrastructure.](images/start-here-machine.svg)

- A clean visit now starts with three useful choices: create or resume a local Self, open the small Chat + Address Book cursor app, or enter the full cockpit.
- Mailbox and cockpit identity use one deployment-scoped encrypted vault key, including migration from the earlier production-root key.
- Chat separates identity, persistence, and content encryption; retained notes remain clearly marked **NOT E2E YET**.
- Cap’n Web now provides a bounded same-origin HTTP pipeline through one `POST /` while ordinary `GET /` still serves the application.
- The same ephemeral capability model can run directly between browsers over the new ordered, reliable `cursors-capnweb-v1` WebRTC data channel.
- WebRTC defaults to device/LAN-local ICE with no STUN or TURN. Manual offer/answer exchange works immediately; admitted CurveMailbox signaling remains an optional later rendezvous.
- HTTP batch remains the correctness fallback, and CURSO/0 signed records remain the durable authority.

![The Chat cursor app keeps identity, persistence, and content encryption visibly separate.](images/chat-address-book.svg)

The signed cursor-app executor is **not** implied by the friendly Chat surface. Arbitrary downloaded JavaScript/WASM still does not execute; issue #20 remains the manifest, isolation, budget, and receipt milestone.

![Deterministic CI capture of the segmented central-machine cockpit after the Start and Chat work.](images/changelog/0.7.1-cockpit.png)

Try the local peer transport in a browser console:

```js
await globalThis.__cursorsAppRuntime.capnWebWebRtc.loopback()
```

Read [Local Cap’n Web over WebRTC](capnweb-webrtc.md), [Cap’n Web Pipeline](capnweb-pipeline.md), [Chat with a Friend](chat-with-a-friend.md), or restart **Tour Start, Self, and the Segmented Machine**.

## 0.6 — Organized Self-centered cockpit

- Restored the stable territorial geometry preferred from PR #9 after previewing the denser information-superhighway experiment.
- Kept the radar sweep, circuit backplanes, observed traffic photons, and selectable machinery; Self now owns the center socket while focus uses a separate return PIP.
- Made semantic depth the third axis: zoom reveals denser instrumentation while Open MCT inspection, history, pinning, and deep links carry the full object model.
- Added browser-memory machinery and a memory cryptopointer without moving remote or unobserved services into local territory.
- Added an originless Cloudflare site Worker path and defensive static-asset size checks.
- Added executable durable-write evaluation: only a successful content-hash read-back counts as a verified copy or resurrection hint.
- Evolved the PR #9 machine into `cursors-self-centered-machine-v2`, enlarged routing hitboxes to cover component cards, and documented the fixed Self anchor in ADR 0002.
- Added an Open MCT Cursor Apps catalog with explicit installed, source-visible, local-prototype, and disconnected-network states.
- Added a generated `/boot/` target whose response body is held below 1,200 bytes and prefers a previously cached core before the bundled release entry.

Restart **Tour the Organized Orbital Cockpit** under Open MCT → Start a Guided Netwalk.

## 0.5 — Information-superhighway preview experiment

- Replaced floating graph geometry with five semantic traffic lanes crossed by evidence-based locality districts.
- Added plug-in machinery modules, interchanges, selected-path highlighting, and traffic photons driven only by observed activity.
- Added [Memory Cryptopointer](#cursors-inspect:pointer%3Amemory) and [Browser Memory](#cursors-inspect:storage%3Abrowser-memory).
- Made pilot/mailbox status a top-bar control.
- Added encrypted identity import for deliberate cross-origin fork recovery.
- Added a pilot address book with explicit local trust labels and no false remote-connect claim.
- Added exchange devtools drill-down for material, carrier, counterparty, locality, author evidence, executor, store, and rate.
- Replaced the unsafe-looking arbitrary agent endpoint with a [safe ChatGPT handoff](chatgpt-collaboration.md).

This geometry is retained in `HISTORY-UI.md`; the current guided tour uses the organized orbital cockpit.

## 0.4 — Persistent bodies vocabulary

- Added [Self / Body](#cursors-inspect:self%3Alocal), [Admission Root](#cursors-inspect:admission%3Aroot), [Cloudflare Mailbox Object](#cursors-inspect:cloudflare%3Amailbox), [SQLite Journal](#cursors-inspect:storage%3Asqlite), and [Signed Release Head](#cursors-inspect:release%3Asigned).
- Added the working local encrypted identity vault.
- Added disabled-by-default Cloudflare Durable Object code and resurrection-capsule semantics.

Restart **What’s New: Persistent Bodies** under Start a Guided Netwalk.

## 0.3 — Explorable exchange machinery

- Made cryptopointers, cryptofabrics, mailboxes, curves, bodies, persistence, and recovery first-class Open MCT objects.
- Added compact inspection drawers, linkable/back-button state, pinning into My Items, local exchange chat, and fork provenance gates.
- Added public searchable guides with live object links and small contextual help.

Restart **Trace a Local Message** or **Resurrect a Dry Network**.

## 0.2 — Observable transport cockpit
- Added browser WebTorrent observation, optional native bridge telemetry, joined-source tables, wire traces, and a public reference source with payload deselected.
- Kept peer counts, content hashes, signatures, encryption, and authority as separate claims.

Read [Operations Console](operations-console.md).