🔮Augur v1.0.0

Added

• InternalPlatform The service loads adapters from a folder beside it that no release includes. One runs only when config.json lists its id, and neither the settings pages nor augur config offer it.
• VisibleUI A route can have a budget. On the Routes page or in routes.json, set dollars, jobs or both for a day, week or month. Once a limit is reached, new jobs on that route are refused with the limit named, and augur usage shows how much is used. Dollars count only jobs whose cost is known.
• VisibleUI A route can list fallback routes. When a job is refused because of a budget, a pause, plan usage or a missing key or adapter, Augur tries each fallback in order and checks it against every rule. The job records which route took it, and augur run --no-failover keeps a job where it was sent.
• VisibleSecurity An API route can keep its key in the Windows credential store. You save the key on the Routes page instead of naming an environment variable. It is never written to routes.json or a job record, and the route cannot run until a key is saved.
• VisibleUI A new provider starts with cautious rules that its models inherit. Public data only, text output only and named before use, with no activity allowed and every model unreviewed. A model can be used only after you confirm it and allow what it needs, and setup says so. Providers already in your rules keep what they have.
• VisibleSecurity Each release lists a SHA-256 checksum for every installer and attaches a bill of materials for its JavaScript and Rust dependencies. The README shows how to compare a download against its checksum, which matters while the installers are unsigned.
• VisibleDocs The README now covers model rules, running jobs for agents and the choice of Jev or Laya, with the steps to install Laya on your own computer. The MCP server and the token and cost figures each have their own page under docs/, and SECURITY.md describes what the MCP server can and cannot do.
• VisibleUI Jobs show tokens and cost, and each figure says whether it was reported, derived or imputed. A cost comes from a rate you list in dispatch/rates.json and the tokens the harness reported, and a job whose cached tokens have no listed price gets no cost. Where a harness reports no tokens, Augur estimates them from the prompt and answer length, but only for a route with at least 8 reporting jobs and a measured error of 35% or less, and the estimate shows that error. augur usage prints the same figures per route. docs/accounting.md explains each.
• VisiblePlatform An MCP server lets Claude Code, Claude Desktop and other MCP clients list models, pick one and run a job through Augur. augur-mcp.cmd ships in the installer’s service folder and offers eight tools: models, pick, run, job, jobs, cancel, pressure and routes. Each call goes through the dispatch service under the same rules as the augur command, so a run needs a pick from the same session and a stated data tier, and the server has no way to skip a check. docs/mcp.md covers registering it and each tool.
• VisibleUI Test route on the Routes page checks that a route works. It sends a fixed one-word prompt through the route and says whether the model answered. augur test <route> does the same from a terminal. The test picks an activity the rules allow for that model, and skips the pick check, since nobody chose the model for a task.
• VisibleUI Dial back on the rules page pauses the high-cost models and favours the cheaper ones until a reset. Pick when it ends from the resets ahead or enter a time, preview every model it would change, then apply. Models at high or very high cost stop, and the weights of free, very cheap and cheap ones rise one step. Each goes back to its own rules when the time passes.
• VisibleUI First-run setup asks who classifies tasks when jobs are on. Choose none, Laya or Jev, with a line on where task text goes for each. The choice restarts the service so it applies at once.
• VisibleUI The bulk bar on Model rules can set data tier, ask first, output, sandbox, cost and effort, and shows what would change first. Preview lists each model that changes and how many already have the value, and Apply writes exactly that list. Choosing Provider default clears the field so the models follow their provider again.
• VisibleSync Model rules edited on the phone or the desktop reach the other one. A paired pair compare rules about once a minute, and a local edit is sent a few seconds after you make it. Each field keeps the newer edit, and a device with a slow clock still orders its edits after ones it has already seen, so a wrong clock cannot bring back an older value. The rules travel encrypted on their own relay channel, under a name only the two devices can work out.
• VisibleUI A Service page sets what Augur does for agents. Usage only keeps Augur as it was, and Also run jobs starts the dispatch service whenever the app opens. The page lists the service’s settings, saves each change as you make it, and says where task text goes for the classifier you pick. First-run setup offers the same choice.
• InternalPlatform augur config shows and changes the service’s settings. Each setting has a type and a range, and a value the service would ignore is refused. The two settings that lower the service’s checks, and the exec adapter, can be changed from the command line and never from the app.
• VisibleUI A Routes page adds, edits and removes the routes agents use. A route joins a model label to an adapter, and the form asks for that adapter’s options and marks the required ones. With the service running, each route shows whether it can start a job. Entries the service would skip are named, and saving leaves them in the file.
• VisibleUI A Jobs page lists the work agents started through Augur. It shows whether the dispatch service is running, with Start and Stop buttons, and each job’s state, result, output and errors. A job that is still going can be cancelled there. The page is in the Windows app.
• VisiblePlatform The Windows installer carries the dispatch service and the augur command. They go in a service folder beside the app. An upgrade or uninstall stops the service first, and waits if a job is running so the job is not cut off. augur service stop --if-idle makes the same check by hand.
• VisibleUI A model can be paused with different weights instead of stopped. On the Model rules page, the pause card asks what happens while it lasts: skip the model, or use replacement weights for any activity. Setting the weights of a cheaper model higher during a pause favours it until the pause ends, and the model list marks such a pause as changed weights rather than paused.

Changed

• VisibleUI A model can set one part of its data handling and inherit the rest. Host country, keeping prompts, training on prompts and pinned host are separate fields, so choosing a host country for one model no longer copies the other three from its provider. The three-way choices gain a Default entry that follows the provider. In policy.json, a model’s inherited list can name a single part, such as dataHandling.retainsPrompts.
• VisibleUI The review button counts models, and the usage data file has its own row in Settings. The button reads “6 models to review” and each provider on the rules page reads “6 need review”. The Open data file link left the bottom of the usage page for the This computer section.
• VisibleUI Rule history shows what changed inside a grouped value. A pause reads as its end time and any weights it changes, and data handling lists only the words that differ, where both used to say “changed”.
• InternalSecurity The desktop app reads the GitHub CLI’s token itself when it fetches Copilot usage. The token no longer reaches page code, and the page can no longer run gh auth token.
• VisibleSync Pairing a phone sends your API keys only if you turn that on. The setting used to be on by default. The warning under the pairing code now says the link can read everything the phone syncs, keys included.
• VisibleUI A provider card can be moved with the keyboard. Focus its handle and press Alt with the Up or Down arrow. The card’s link and collapse buttons are now 24 px.
• InternalSecurity The dispatch service starts stricter. It checks picks and named-model claims by default, reads a prompt file only from inside the job’s folder or a listed root, sends an API key only over https or to localhost, and will not start a job on Windows without the job host. A rule that limits a model to text is refused for an adapter that cannot hold a read-only tier. augur run needs —activity and —data, and defaults to read tools and text output.
• InternalSecurity Text about students is checked on this computer before anything is classified, and never drops below regulated. Only a backend on this network sees it, and with none the task is regulated without asking.
• InternalPlatform Laya defaults to this computer. Other machines come from settings, the server binds to loopback unless told otherwise, and a new adapter goes live only when it beats the current one by a margin on at least 50 held-out rows. Failed and cancelled jobs no longer count as poor fits.
• InternalPlatform CI runs every package on Windows with the job host built, plus the Laya tests.
• VisibleUI Cost has six steps: free, very cheap, cheap, moderate, high and very high. The old expensive step now reads as high, and the models that used it keep their place until you change them. When usage runs short, the higher steps drop out first.
• VisibleUI The update and models-to-review buttons sit to the left of the theme button. They are the header’s alerts, so they now come first and stay apart from the controls.

Fixed

• InternalPlatform The service notices a file that changed within the same timestamp tick. It re-reads policy.json, usage.json and routes.json when their size changes as well as their modification time, so two quick writes no longer leave it on the older one.
• VisibleUI A pause until a reset is not offered on a stale reading. If the provider’s last reading failed or is more than 30 minutes old, the reset list stays empty and says why, and a reset that has already passed is never listed. A pause could otherwise end at the wrong time, or not last at all.
• InternalPlatform augur service stop waits until the service is gone. It used to return while the service was still answering.
• VisibleUI A failed write of policy.json shows on the Model rules page. It used to say Saved while agents kept the older file. The banner has a Try again button.
• InternalPlatform Adopting an existing policy.json keeps each model inheriting from its provider. A later change to a provider default reaches those models.
• InternalSecurity The prompt is removed from the stored job plan before the harness starts, so a failed launch leaves none on disk. Copies made for patch-only jobs leave out .env files and key files.
• VisibleUI Bulk actions on the Model rules page say what they did. Setting a data tier, an activity weight, or confirming or hiding models now shows a line in the selection bar naming the change and how many models it reached, and the data tier menu keeps the value you chose. Before, the menu snapped back to its label with no sign that the change had been saved.