All release notes
Platform
Scheduled-job audit and stable device identity
Automation reliability audit across all scheduled jobs, a client settings persistence fix, partner admin access corrections, an enrollment package re-download flow, duplicate device prevention via stable machine identity, and expanded Defender telemetry covering threat detections and tamper protection state.
New
- Enrollment package re-download: administrators can generate a fresh package download without creating duplicate tokens or reusing stale installer state.
- Windows Defender threat detections now flow end-to-end: collected by the agent, processed into backend change risks, and displayed on the device detail page.
- Tamper protection state is now tracked and opens or resolves backend risks automatically when it is disabled or restored.
Improved
- All scheduled jobs verified and hardened: CVE bridge sync, correlation sweeps, custom risk rule evaluation, scheduled reports, and AI processor jobs all start correctly on boot, respect their intended cadence, and carry improved logging for skipped runs and active locks.
- AI queue semantics clarified in the UI: queue_remaining (manual_review rows) and ambiguous_count (broader CVE open-review queue) are now shown as intentionally distinct metrics.
Fixed
- Saving client settings no longer fails with validation errors. Ticket settings and session-related settings now persist correctly.
- Partner admins can access intended partner settings paths again and see audit activity scoped to their own partner events.
- Client detail page no longer crashes during rapid tab switching.
- Duplicate devices from re-enrollment are prevented: the agent derives machine_id from the stable Windows MachineGuid and the backend reuses existing device records on matching key.