What has shipped.

Largest release yet: 50 Ottili LD3 content initiatives, a security and observability hardening wave, the new Ottili AI Agent Runtime, and MEE Plan Mode.

• Ottili LD3 Content Package Wave — 50 initiatives (I01–I50) with full T01–T10 task coverage
• Security hardening — tenant-isolation audits and entitlement controls (T07) across all initiatives
• Observability wave — performance limits and operational safeguards (T08) across all initiatives
• Ottili AI Agent Runtime — durable state persistence, SSE live events, model-driven planning
• MEE Plan Mode — multi-task execution with observability safeguards
• Ottili LD3 Platform v2 Overhaul — plan compliance, bug fixes, feature additions, test coverage
• Unified API v1.0.9 — version bump aligned with the release tag
• Dashboard stabilization — package-lock sync for Docker, typecheck cleanup, UI-kit work
• Ottili Coder fixes — github_agent state clearing on retry, rate-limit handling
• Customer Portal — invite-only access control, per-customer profiles, portal.ottili.one deploy
• Payment Assistant for invoice-based approval payments — backend, frontend and UX states
• New tag style vMAJOR.MINOR.PATCH-channel.N (migrated from v.1.0.x-beta)

New Office Suite, Ottili Coder, and a broad hardening pass across auth, the dashboard, and the Ottili LD3 content pipeline.

• Office Suite — document management with create dialog, document lists and templates
• Ottili Coder — AI coding product over GitHub Actions, including marketing page
• CSRF protection and OAuth bootstrap in the dashboard; more robust auth refresh and session precedence
• Dashboard stability — fixes for Simulation, Action Center, AI and Fraud views
• Ottili LD3 aligned with Platform Plan v2 (publishing levels, content packages)
• Browser automation with domain allowlist / denylist policy
• Simulation Engine — inventory demand forecast template
• Startup safety validation and restart-loop protection for the Unified API

Simulation Engine, AI missions and billing core go live, paired with a major security and import-stability hardening pass across all services.

• Simulation Engine — probabilistic business simulation, Monte Carlo, scenarios
• AI missions and billing core added to the platform
• AI dashboard — runtime status, context panel redesign, full DE→EN translation
• Security — all services bind to 127.0.0.1 by default; Unified API no longer publicly reachable
• Stability — missing __init__.py and optional import guards (Playwright, multipart) across many services

The big SaaS release: full approval workflow, module runtime, plan limits, an encrypted credential vault, and onboarding.

• Approval workflow — UI with approve/reject, execution, audit trail and pagination
• Module runtime adapters and module activation gates
• SaaS plan limits — CRM records, products, automations, AI messages, team members
• Billing catalog and plan enforcement at workflow trigger
• Credential vault — per-company encryption, 13 new providers
• Post-registration onboarding wizard with company setup
• Google OAuth login in the dashboard, remember-me auth, CAPTCHA infrastructure

Business tools overhaul with production-ready CRUD interfaces, new business metrics, and the Caddy reverse proxy.

• Business Tools — design overhaul with production-ready CRUD modals
• Comprehensive business metrics endpoints for the dashboard
• Caddy reverse proxy added to docker-compose
• Ottili Coder (formerly CodeHelm) — GitHub and OpenAI device auth endpoints
• Ottili Coder agent runtime (formerly Dev Orchestrator / Micro-Engine) — control panel and more stable agent routing fallback

Build-out of the Ottili LD3 content automation: article CRUD, multi-tenant isolation, dropshipping, and email notifications.

• Ottili LD3 — article CRUD, content_kind, repurpose and a clean error contract
• Multi-tenant isolation — session-aware tenant_key, no cross-company access
• Dropshipping integration and updated dashboard stats
• Email notifications and a hardened AI / publishing pipeline
• SaaS landing page, legal pages and access requests

Introduction of Ottili Auth — the platform's central, unified authentication service.

• Ottili Auth — unified central authentication service (port 8010)
• JWT access tokens + refresh token rotation (RTR)
• Argon2id password hashing and PostgreSQL-persisted account lockout
• Redis-backed rate limiting and service API keys

The first public release of Ottili ONE: the core architecture with the Unified API, microservice layout, and the first database schemas.

• Unified API gateway — single entry point for all external and AI-agent access
• Microservice architecture with a single-gateway access model
• PostgreSQL as the system of record — live, log, auth, full, public schemas
• Company workspace isolation and role-based access control
• Redis for queues and session management

Ottili ONE has been in development since March 2025. Before the first public release in January 2026 came roughly ten months of alpha work: architecture, prototyping and intensive internal testing of the core platform.

• Platform design and architecture — single-gateway model, microservices and security envelope
• Prototyping of the core services and the automation layer
• Data model and PostgreSQL schema groundwork
• Months of internal testing, iteration and hardening before the first release