August 13, 2026

Enterprise
Self-Hosting

v2.3.1

Release v2.3.1 adds Bedrock credential and trust-details support, expands risk-assessment and heatmap functionality, and introduces on-prem MCP service support. It also includes governance policy updates, cost-management schema changes, and several operator-facing fixes for Bedrock, ClickHouse, and project creation.

Highlights

Bedrock credentials now support trust details, IAM role fields, and STS assume-role handling.
Risk assessment adds attack heatmaps, refusal decay graphs, and related drill-down endpoints.
Governance policy management received base-policy support and policy/schema updates.
On-prem deployments now include an MCP service.

New Features

Bedrock Trust Details — Added a fetcher for Bedrock trust details and loaded those details into the credentials editor.
Bedrock IAM Role Configuration — Added Bedrock IAM role fields to the credentials editor and defaulted Bedrock to the IAM role tab while keeping both tabs visible.
Bedrock Template Exposure — Exposed the Bedrock CloudFormation template URL and added the customer Bedrock access template.
Risk Assessment Heatmap — Added attack-matrix and refusal-decay views, related endpoints, and heatmap UI for vulnerability analysis.
On-Prem MCP Service — Added an MCP service for on-prem deployments.

Improvements

Bedrock Credential Selection — Bedrock credential validation now saves per auth type and falls back to the selected model when the Bedrock config has no model ID.
Risk Assessment Visuals — The attack heatmap and refusal-decay graphs now support pinned rows, step lines, axis titles, and improved legends.
Governance Base Policy — Added governance base-policy support and related policy persistence changes.
Project Creation Guard — Project creation now correctly guards on orgId.
Model Catalog Sync — The bundled model catalog was synchronized from models.dev.

Fixes

Bedrock Template Publishing — The Bedrock template is now published with a bucket policy instead of an ACL.
Bedrock STS and Validation — Bedrock trust details are now required before saving an IAM role, and STS uses the chained session duration by default.
Risk Assessment Aggregation — Attack-matrix fail rates now exclude errored test cases and overview aggregates are rebuilt for runs that never finalized.
ClickHouse Dropdown OOM — Dropdown-related ClickHouse memory usage was reduced to avoid OOMs.
Annotation Page Bug — Fixed a bug on the annotation page.

Breaking changes

Bedrock Credential Flow — Bedrock credentials now depend on auth-type-specific validation and trust details for IAM role saves. Migration: Verify Bedrock credentials are configured with the correct auth type and trust details before upgrading.
Cost Management Schema — The release includes a Prisma schema change and migration for cost-management logic, including overage counting. Migration: Run the database migration before serving traffic.
Governance Policy Schema — The release includes a Prisma schema change and migration for governance policy changes. Migration: Run the database migration before serving traffic.
Framework and Route Updates — Framework and model routes were updated, including optional framework IDs on POST and pluralized model route paths. Migration: Update any client integrations or internal callers using the affected routes.

Upgrade Notes

Apply the included database migrations before starting the new version. Review Bedrock configuration for trust details, IAM role auth type, and STS assume-role behavior, and update any integrations that call the changed framework or model routes.