System Explorer

• Edit source: open a class or routine and choose Edit source, then Save. Only a person can save code; the agent never does. A save is refused if someone else changed the document since you opened it, or holds it locked, and OcuPilot's own code cannot be saved.
• Search code across a namespace's classes and routines, compare two documents line by line, and find where a macro is defined. You can also ask the agent to search or look up a macro.
• An SQL catalog: schemas, tables, views and procedures, each with its details - fields, indices, triggers, constraints, partitions, cached queries and the SQL statements that use it. You see only what your own SQL privileges reach.

Journals

• The journal list and each file's details; switch to a new journal file or directory; check a journal's integrity.
• View and change the journal settings. A change is checked for the privileges it needs before anything is written, so it is never half-applied.
• Page through a journal file's records.

Easier to use

• Typing a screen's name in the command box opens that screen first.

Requires InterSystems IRIS or IRIS for Health 2026.2 or later. Upgrading from 1.0.7 keeps your agent definitions, conversations, settings and audit records.

IRIS startup fix

Thank you to the QA team for testing the full IRIS setup and reporting the password-change failure. The previously selected IRIS Community 2026.2 image lacks a utility needed by its --password-file startup path. The optional IRIS stack now pins the tested 2026.1 image and validates the password before startup.

A fresh full-stack run now starts IRIS, connects Battery as _SYSTEM, reads 16 tasks, and confirms that an unreviewed task is blocked. Live changes remain disabled by default. The lightweight synthetic demonstration is unchanged.

For a retest after a failed initialization, use a fresh disposable Compose project rather than deleting an existing data volume.

Source: https://github.com/rbnbric/armada-battery
Passing live check: https://github.com/rbnbric/armada-battery/actions/runs/37143309190

Model switch in the agent console (DPI-I-516)

IRIS Relay 0.5.1: the full operations UI, installed with IPM and served by IRIS. No external Node.js or Python server and no extra container are needed.

On IRIS 2026.2 with IPM and access to the public registry:
zpm "repo -r -n registry -url https://pm.community.intersystems.com/"
zpm "install iris-relay"
The first line configures the registry once on a fresh IPM 0.9+. Open /relay/index.html over HTTPS, or http://localhost:52773/relay/index.html on the IRIS machine, and sign in with your IRIS account and the documented permissions.

The full UI covers system overview, web applications, a 28-operation read-only REST explorer, permissions, security, scheduled tasks, current and archived log investigation, lexical similarity search with Embedded Python and IRIS Vector Search, audit summaries, baseline comparison and Markdown/JSON handover export. Changes use review, fresh-state checks, replay rejection and readback; IRIS still enforces authorization.

Version 0.5.1 addresses Robert Cemper's review: the new disposable Compose lab publishes the IRIS web server on 127.0.0.1:52773 and clears pre-expired lab passwords once. This lab bootstrap does not reset users in an IPM installation or the existing public demo. Relay sign-in offers a manual password-change form in the Node and IRIS-served UIs. In USER, a failed /api/relay sign-in returns 404 and the page cannot distinguish an expired password from a wrong one; Change password appears beside the sign-in error, with a Management Portal link. IRIS checks the current password and password rules. The public demo remains unchanged.

The 0.5.1 public-registry installation is now verified: Claude installed it on clean IRIS 2026.2 with IPM 0.10.9 after registry transport setup, then checked HTTP, the full IRIS-served UI in Chromium, guards, manual password change with disposable accounts and uninstall. Codex reviewed the evidence. There are 183 recorded checks, including 112 browser checks and wrapper records; they are not 183 independent behaviors or a production-readiness claim. Codex's earlier isolated VPS checks passed 69 JavaScript and 36 Python tests with zero skips; CI and Pages succeeded on the same source commit.

Source: https://github.com/rafaorlando3/iris-relay/commit/ebe392be0f6f96899c2fa94e65f4b75df3bf2aab
AI disclosure: Claude implemented and tested the changes; Codex reviewed, integrated and published them, and drafted this release-note update.

1.0.6 was not published here on its own, so these notes cover 1.0.6 and 1.0.7.

New

• System Explorer, a new area: browse a namespace's classes and routines and read their source; compile and delete them, with the compiler's output on the screen; export them as XML to a file on the server or a download; and import an XML export or a source file from the server or your computer. As in the classic portal, browsing needs only %Development and read access to the namespace's code, so a developer can use it without any administration role. Changing code also needs write access, and OcuPilot's own classes are refused.
• Remote databases: list, create, edit and delete remote (ECP) database definitions, with a licence check first.
• Enable interoperability on a namespace, from the Namespaces screen or by asking the agent. On IRIS for Health this also runs the HealthShare Foundation setup, which cannot be undone, so you type the namespace's name to confirm, and only an account assigned the %All role itself can do it.

Safety

• Six of the agent's new actions start switched off: enabling interoperability, deleting a remote database, and deleting or importing classes and routines. Turn them on under Agent co-pilot → Governance policy; the screens themselves do all six.
• An import shows what the file holds before you confirm, and is refused if the file changes after you review it.
• A secret the model repeats as a tool call's id now shows as [redacted] in the tool-call card, the progress view and the saved conversation. Conversations saved before the update keep it until retention removes them.
• Giving a service a privileged role, such as %Manager, %Operator or any role that reaches %All or an %Admin_ resource, is now treated as a destructive change and marked as privileged in the Services editor.

For judges

• The README now opens with a two-minute path: six steps on the live demo, the three-command Docker start, and how OcuPilot is built on the SysAdmin API. The demo account can now open System Explorer too.

Requires InterSystems IRIS or IRIS for Health 2026.2 or later. Upgrading from 1.0.5 keeps your agent definitions, conversations, settings and audit records.

Reviewer-feedback update

Thank you to the reviewer who built and tested the first release. This revision addresses the friction they found while keeping the traditional portal available.

• The default Docker path now starts the lightweight synthetic portal. A live IRIS instance is an optional overlay.
• The eight-scenario proof and full test suite run inside Docker; neither requires local Python.
• The overview now shows an observed synthetic task-history finding. It opens a guarded request and resolves only after fresh evidence supports a verified receipt.
• The result is visible up front: one dispatch, zero automatic retries, and 8/8 deterministic checks passed.

The original demonstration remains available. A separate before-and-after video update shows the changes and the complete finding-to-receipt path.

The finding and assurance walkthrough use synthetic fixtures. Live IRIS remains read-only by default; this release does not claim qualified live mutations.

Source revision: 5ab2531

✨ New

• Step execution detail in the run view. Click a step in any run, live or finished, to see when it started and finished, where and as whom it ran, the platform's failure reason in full, and the result it produced (size report, headroom findings). A step can be opened by its own link (?run=…&step=…), so you can share exactly what you were looking at.
• Refreshed canvas design:
  • A global top bar and a dedicated flow bar.
  • A clearer empty canvas.
  • A palette you can collapse.
  • The Task catalog and the Overview now point you to what needs attention first.
• Ready-made demo flows. The image now comes with a weekly maintenance window flow and failure scenarios, such as a check that fails inside the window and a security posture report with findings. You can see how a failed step stops the steps after it at an ALL_MUST_SUCCEED join without building anything first.

🐛 Fixes

• A 401 that came in before a token renewal no longer signs you out of the session. Before, this could freeze the live run view during long runs.
• Accessibility: each screen now has exactly one main landmark and one h1. Long class names in the palette now wrap at the dots instead of overflowing.

📚 Docs

• A "For judges: two minutes" quick path at the top of the README: what makes SentaiTask different, and a 90-second Docker quickstart.
• Fixed the description of what happens to downstream steps when a disk check fails: they are stopped at the join, not skipped.
• A demo video is now in the repository (sentai-demo.mp4 / .webm).

🧪 Quality

• The e2e suite is green again. Three failures came from outdated tests, not from the product.

IRIS Relay 0.5.0 installs the full Relay UI through IPM and serves it directly from IRIS at /relay/index.html. No Node.js or Python server is needed outside IRIS. Relay Lite remains available at /relay/lite.html.

The IRIS-served UI includes management views, the 28-operation REST explorer, reviewed configuration changes, scheduled tasks, log paging and similarity search, audit summaries, baseline comparison and Markdown/JSON handover export. Changes use review, fresh-state checks and readback. IRIS authorization still governs each operation. HTTPS is required for remote use; HTTP is allowed only on loopback. The README documents operator roles, SQL grants, shared-origin risks and the tested Normal security configuration.

Reviewed source: 89b9d525f30c61c93ed294f1fe8c7d979df6c4bc. Codex independently ran 64 JavaScript and 29 Python tests on the isolated VPS checkout, with zero skips; GitHub CI and Pages succeeded on this commit. Claude's isolated-cloud validation passed 158 end-to-end checks using local IPM load, including 112 browser checks of the IRIS-served UI. Public registry installation will be verified independently after this release.

AI disclosure: Claude implemented and tested the IRIS-served UI; Codex reviewed, integrated and published it.

v1.0.3: added the AI-Powered Instance Monitor feature (Community Opportunity idea DPI-I-512).

Relay Lite is now served directly by IRIS after installing iris-relay 0.4.1 from IPM: open /relay/index.html over HTTPS (HTTP is allowed only on loopback). It lists log sources, pages through messages.log and rotations, and provides lexical similarity search over a bounded IRIS Vector Search index. The Lite UI needs no Node.js or Python server; the full management UI remains available through the existing Compose/Node setup.

The page requires an IRIS user with %Admin_Operate:U; search SQL permissions and index limits are documented in README. Credentials are blocked outside HTTPS or loopback, stale requests cannot overwrite a newer session, and /relay serves static files with CSP/automatic compilation disabled.

Reviewed source: 34ed98984f15fec85d54036104f1c93d9cdd474d. GitHub CI: 46 JavaScript and 29 Python tests passed. Claude tested local IPM load/uninstall and 15 browser groups in an isolated cloud IRIS; public registry installation will be checked independently after this release. The existing public demo is unchanged.

AI disclosure: Claude implemented and tested Relay Lite; Codex reviewed and published the change.

• Added the online demo link (hosted on Oracle Cloud with HTTPS).
• Added the YouTube demonstration video.
• Enabled publishing to the IPM/ZPM Package Manager registry.

• Every screen fits a phone and a laptop. The dashboard's upcoming tasks keep their status inside the card, with the time under each name: on a 1280-pixel laptop the status badges used to sit 92 pixels outside the card, and on a phone the page scrolled sideways. A database's volumes, the license servers and the connections now scroll sideways inside their card on a phone, as the other tables do.
• A browser test keeps it that way. It opens every screen at 360 and 1024 pixels wide and fails when anything scrolls the page sideways or leaves its card.

The image: docker pull ghcr.io/mxsalata/aperture:1.3.0

Changed container repository to the public one so that everyone can see it.

Updated the details in the deployment process

Added: Manage and monitor several IRIS instances from one interface

New editors

• Services: edit a service's enabled state, its allowed IP addresses, its roles and its authentication methods.
• LDAP and Kerberos: create, edit and delete configurations, set the search password, and run a test sign-in that keeps no password.

Clearer screens

• Each agent turn shows which model provider and host its data went to.
• The New Namespace form keeps what you typed when you create a database from it.
• The integrity check's log has its own entry in the side bar.
• Logs you may not open are listed on one line, with what they need.
• A database's volume files show in a proper table.

Safety

• An installed OcuPilot carries no test code. Updating removes the test classes earlier releases installed, and the start log says how many.
• A screen action and a confirmed agent change on the same item no longer run at the same time: the second waits up to 10 seconds, then says the item is busy.
• Removing all of a process's or a remote client's locks checks the list again before each removal.

Requires InterSystems IRIS or IRIS for Health 2026.2 or later. Upgrading from 1.0.4 keeps your agent definitions, conversations, settings and audit records.

OpsDeck 0.2.0 delivers the native IRIS-hosted operations console with responsive, available-width layouts.
Highlights:

• Native /opsdeck application served by IRIS without a Node runtime.
• Read-only Overview, Applications, Access, Security, Tasks, System, Logs, and Evidence views.
• Authoritative application read-back and session-safe sign-out behavior.
• Compact navigation, vertically stacked inspectors, reflowing lists, and wrapped tabs at constrained widths.
  Qualification: local-source load, operational checks, uninstall/removal, unrelated-state preservation, and clean same-source reload were reproduced on IRIS 2026.2 Build 221U. The installed native browser and 82/82 product tests passed.
  Scope: exact core IPM version, fresh public-checkout installation, and public-registry availability/installation remain unverified. M1 is partial; audit asynchronous result retrieval, Messages, and System Monitor are not qualified. No ObjectScript execution bridge or CallIn is claimed.
  Source and full scope: https://github.com/KennethJSmithDev/OpsDeck/releases/tag/v0.2.0

fix: pass ISCAgent startup flag to IRIS

Update on the deployment issues

Key Enhancements:
🧩 Closed Capability Catalog
A single allowlist of approved AI operations. The Copilot cannot invent or execute arbitrary operations.
📋 Rich Capability Metadata
Each capability declares examples, constraints, verification, and undo information, while privileges and risk come from the existing operation registry.
⏱️ Task Catalog
Ask natural-language questions about live IRIS tasks, including suspended tasks, errors, schedules, and run-as users — completely read-only.
🔎 Capability Discovery:
A read-only API exposes the currently approved capabilities and their metadata without exposing handlers or implementation details.
🧵 Structured Execution Trace
Planning and execution produce linked copilot. plan and copilot. execute traces connected to the underlying operation trace.
🛡️ Structured Failure States
Rejections and failures use machine-readable codes such as authorization_failed, resource_protected, verification_failed, and issue_still_detected.
🔐 Defense in Depth
AI output is only a proposal. Parameters are rebuilt server-side, authorization is rechecked, explicit confirmation is required, and every mutation is verified.

Disks and system operation

• Mount, dismount, truncate, compact, defragment, expand and grow a database, with progress for the long-running ones.
• A three-step integrity check with its own log.
• External language servers: see their status, start and stop them, read each one's activity log, and create, edit and delete them.
• Suspend and resume the Task Manager, with a warning that no scheduled task runs until it is resumed.
• Remove a lock, all of a process's locks, or all of a remote client's.
  Easier to start
• Windows: a Git for Windows clone could not start the container, because the start scripts arrived with Windows line endings. They now always check out correctly. A clone made before 1.0.4 needs one command after git pull, given in the README under Troubleshooting.
• With no model configured, the model form opens on the first sign-in only, and Cancel takes you to Home. Every screen works without a model.
  Better answers
• Explain this entry reads the chosen log entry together with the rest of the page.
• An area opens when you may use any of its screens; each screen still checks your own privileges.
• Try it in the REST API explorer explains, in a plain sentence, a request the browser could not complete.
• A proposal card keeps its privilege warning current after its turn has ended.
  Safety
• The agent's eight disk operations start switched off. Turn them on under Agent co-pilot → Governance policy; the screens themselves do all eight.
• Adding a privileged role to the authorization server's customization role is now treated as a privilege grant.
• Creating or editing a task checks the task type's privilege again when you confirm.
• The nightly retention clean-up no longer raises the instance's state to Warning.
• A new-volume threshold that would put database volumes in the manager directory is refused.
  A refreshed README with retaken screenshots, and many small fixes.
  Requires InterSystems IRIS or IRIS for Health 2026.2 or later. Upgrading from 1.0.3 keeps your agent definitions, conversations, settings and audit records.

fix: resolve IRIS compilation and installer errors

Add community articles

Migration of administrative areas (Processes, Users and Roles, Tasks, Web Applications, and Security) to the official InterSystems SysAdmin v2 API. Includes a new automated test suite validating read operations and actual mutations via the official API.

What's new

• Public demo ready — least-privilege demo account, daily reset, and a warning before a cancel that makes IRIS raise an alert.
• Semantic step search — the palette finds step types by intent ("check disk space"), not just by name.
• In-process embeddings — the search model runs inside IRIS through Embedded Python (CPU-only, offline, no second service).
• Run log & history — every run records its own log (steps, durations, the platform's failure reasons verbatim); a Runs screen finds past runs; any run exports to a file.
• Report steps — security posture, web application inventory, system alerts and secrets inventory as flow steps, locally or on target servers.
• Scheduled runs that execute — one native task per flow, running as a run-as account whose password is kept in the IRIS Wallet.
• Instance overview API — processes (suspend/resume/terminate), locks, shared memory, activity, devices, licenses and web sessions, as the platform reports them.
• Overview screen — the new landing screen: live cards for each area, detail views, and area reports run from a card.
• Security inventory — certificate-expiry-check (schedule it to be warned before a certificate expires), permissions-inventory and oauth-inventory. Read-only; no secret is ever read.
• Docs — README and known limitations brought up to date.

Databases and namespaces

• Local databases: a three-step Create wizard, a properties editor with the volume files, and delete by typed name, optionally with the files. A new database always needs its own directory.
• Namespaces: create, edit and delete, with what a delete would take with it shown first.
• Global, routine and package mappings, and copying mappings from one namespace to another.
  New screens
• A unified log hub: every log in one list, and one timeline merging them newest first.
• License usage and the full dashboard.
• Web sessions, listed and ended.
• Background tasks: pause, resume and cancel.
• Broadcast a message to terminal sessions.
• Task export and import.
• A user's effective privileges, and Check permission for any user or role.
• The agent audit ledger: each model call, tool call and confirmed write.
• Allowed directories, and Copy as curl beside the try-it console's Send.
  Safety
• Four agent actions start switched off: deleting a local database, deleting a namespace, importing tasks and purging the audit database. Turn them on under Agent co-pilot → Governance policy; the screens themselves still do all four.
• Images in agent replies show as their text description only.
• Routine "not found" answers no longer raise the instance's alert state.
  A refreshed README with new screenshots, and many small fixes.
  Requires InterSystems IRIS or IRIS for Health 2026.2 or later. Upgrading from 1.0.2 keeps your agent definitions, conversations, settings and audit records.

1.2.0: opening an entry of the Messages log now says how often its message was logged and since when, found with IRIS Vector Search, and Show similar entries lists them (nothing is indexed until you ask); in the online demo the index is ready from the start. Dependency updates now arrive monthly and each merged batch is a patch release of its own (1.1.1 was the first). The README links the video walkthrough and names every contest bonus.

1.2.0: opening an entry of the Messages log now says how often its message was logged and since when, found with IRIS Vector Search, and Show similar entries lists them (nothing is indexed until you ask); in the online demo the index is ready from the start. Dependency updates now arrive monthly and each merged batch is a patch release of its own (1.1.1 was the first). The README links the video walkthrough and names every contest bonus.

A regular app, easy to find. On macOS the app now has a Dock icon, so it can't get lost behind the notch any more.

• Clicking the Dock icon, or opening the app again, shows the Profiles window.
• The menu bar has File → Profiles… (Cmd-,) and Quit (Cmd-Q).
• Starting the app a second time on any platform brings up the running app's Profiles window.
• Windows, the Dock and the Windows taskbar show the ValhallISC logo.

Windows installer. ValhallISC-0.9.3-windows-x86_64-setup.exe installs per user without administrator rights. It adds a Start menu entry, an optional desktop icon and an uninstaller in Installed apps. The standalone executables are still available.

Source control. In namespaces under IRIS source control (for example git-source-control or CCR), checked-out classes and routines are marked:

• macOS: Finder tags, green "Checked out" (by you) and orange "Checked out by ";
• Linux: user.xdg.tags attributes (shown by KDE Dolphin), plus _CHECKED_OUT.txt in each folder;
• Windows: _CHECKED_OUT.txt in each folder.

Documents you can't edit are read-only. Check-out, check-in and commit stay in your usual tools; importing a file still goes through the server's source control hooks.

Profiles window, reviewed.

• Mount is the main button, bottom right; it reads Save & Mount when there are unsaved changes.
• The interface says Mount / Unmount / Mounted throughout.
• A mounted profile shows its state and folder in a two-line banner.
• Coloured state dots in the list and in the menu: grey not mounted, amber mounting or unmounting, green mounted.
• If the server can't be reached, a hint suggests the web server's port: IRIS 2023.2 and later have no built-in web server on 52773.
• In the menu bar menu, idle servers read "Name — Mount".
• Clearer dark theme; the locked password field no longer looks editable.

Harbor 1.1.0 adds IPM installation of the production frontend, bundled gateway dependencies and native extension. Node.js 22.12+ remains required; no npm or compiler is needed on the target host. Follow docs/HARBOR_IPM.md for installation, service setup and lifecycle operations.
The launcher requires explicit origin, cookie, instance and external data settings. It rejects relative or package-contained data locations, including symlinks. The extension installer refuses a route owned by another dispatch class or namespace. It creates no native accounts, credentials, grants or sample tasks. Package resources have application-specific names.
Validation: production build and 341 source tests plus two packaging tests. Isolated IRIS 2026.2/IPM 0.10.8 source and archive installations, native login and extension reads, retained records after uninstall/reinstall, conflicting-route refusal, desktop and 390px browser checks passed. External records remained byte-identical. Existing production data and earlier releases are unchanged.
IPM publication is requested through the existing Open Exchange application. Registry availability and bonus awards are separate from local package validation.