@piagent/platform 1.44.1 → 1.44.3

package/docs-site/en/index.html

@@ -36,7 +36,7 @@
         <span class="brand-mark"><img src="/assets/piagent-logo.svg" alt="" width="28" height="28" /></span>
         <span class="brand-name"><b>Piagent</b> <span>Platform</span></span>
       </a>
-      <a class="version-badge" href="/en/whats-new" data-docs-version="v1.44.1" title="v1.44.1 docs · EN"><span class="dot"></span>v1.44.1</a>
+      <a class="version-badge" href="/en/whats-new" data-docs-version="v1.44.3" title="v1.44.3 docs · EN"><span class="dot"></span>v1.44.3</a>
       <nav class="top-nav" aria-label="Documentation">
         <a href="/en/quickstart">Docs</a>
         <a href="/en/whats-new">Changelog</a>
@@ -56,7 +56,7 @@
   <div class="hero-bg" aria-hidden="true"></div>
   <div class="hero-glow" aria-hidden="true"></div>
   <div class="home-wrap">
-    <a class="hero-pill" href="/en/whats-new#v1-44-1"><b>v1.44.1</b><span>Your own Pi stays, pick a Terminal style, add skill repositories</span><svg class="icon" viewBox="0 0 24 24" aria-hidden="true"><use href="#icon-arrow-right"/></svg></a>
+    <a class="hero-pill" href="/en/whats-new#v1-44-3"><b>v1.44.3</b><span>Prompt injection cannot quietly read the system</span><svg class="icon" viewBox="0 0 24 24" aria-hidden="true"><use href="#icon-arrow-right"/></svg></a>
     <h1>A coding agent for the whole team, <span class="grad">checked at every step.</span></h1>
     <p class="hero-sub">A guard stops risky tool calls before they run. The team's Harness runs checks and has a subagent review the change. One dashboard for Terminal and the browser, with your model or the company's.</p>
     <div class="hero-cta">
@@ -99,7 +99,7 @@
       <div><strong><span data-count="54">54</span><em>/54</em></strong><span>tasks resolved in the production benchmark</span><small>codex-cli, same model: 48/54</small></div>
       <div><strong>−<span data-count="61">61</span><em>%</em></strong><span>fresh tokens on the same workload</span><small>95% confidence: at least −51.6%</small></div>
       <div><strong><span data-count="52">52</span><em>/52</em></strong><span>secret patterns redacted from output</span><small>0/30 ordinary texts redacted by mistake</small></div>
-      <div><strong><span data-count="121">121</span></strong><span>releases since 2026-07-21</span><small>4,400+ automated tests on macOS and Linux</small></div>
+      <div><strong><span data-count="123">123</span></strong><span>releases since 2026-07-21</span><small>4,400+ automated tests on macOS and Linux</small></div>
     </div>
   </div>
 </section>
@@ -280,22 +280,22 @@ pi                    # Terminal</code></pre></div></div>
       <p>Each release says what changed and which Studio or Agent Watch it needs. <a href="/en/whats-new">See the full changelog</a>.</p>
     </div>
     <div class="updates">
-      <a class="update" href="/en/whats-new#v1-44-1" data-reveal>
-        <span class="update-meta"><span class="release-version">v1.44.1</span>Oct 28, 2026</span>
-        <h3>Your own Pi stays, pick a Terminal style, add skill repositories</h3>
-        <p>A member who runs a newer Pi keeps it while Piagent runs its own pinned copy; /style picks the Terminal's look; piagent skills add brings in skill repositories such as mattpocock/skills.</p>
+      <a class="update" href="/en/whats-new#v1-44-3" data-reveal>
+        <span class="update-meta"><span class="release-version">v1.44.3</span>Oct 28, 2026</span>
+        <h3>Prompt injection cannot quietly read the system</h3>
+        <p>Text in a page, file, memory or helper answer can no longer send data to an unknown site, read credentials in Bypass or steer the agent without the member seeing it.</p>
         <span class="update-more">Read more <svg class="icon" viewBox="0 0 24 24" aria-hidden="true"><use href="#icon-arrow-right"/></svg></span>
       </a>
-      <a class="update" href="/en/whats-new#v1-43-9" data-reveal>
-        <span class="update-meta"><span class="release-version">v1.43.9</span>Oct 27, 2026</span>
-        <h3>Every installed skill, and files the agent hands back</h3>
-        <p>Skills from Claude and Codex plugins, such as superpowers, reach the agent; a file the agent links opens in the web view; the folder picker works on Windows.</p>
+      <a class="update" href="/en/whats-new#v1-44-2" data-reveal>
+        <span class="update-meta"><span class="release-version">v1.44.2</span>Oct 28, 2026</span>
+        <h3>The company harness follows the size of a change</h3>
+        <p>A small change ends after its checks without a review; a risky one has its checks and review required. The main agent may keep a few quick web lookups beside the research helper.</p>
         <span class="update-more">Read more <svg class="icon" viewBox="0 0 24 24" aria-hidden="true"><use href="#icon-arrow-right"/></svg></span>
       </a>
-      <a class="update" href="/en/whats-new#v1-43-6" data-reveal>
-        <span class="update-meta"><span class="release-version">v1.43.6</span>Oct 27, 2026</span>
-        <h3>Watch the agent's edits while it runs</h3>
-        <p>Changes and Review follow a running turn, so a run going wrong can be caught and stopped early, and a turn still running never looks finished.</p>
+      <a class="update" href="/en/whats-new#v1-44-1" data-reveal>
+        <span class="update-meta"><span class="release-version">v1.44.1</span>Oct 28, 2026</span>
+        <h3>Your own Pi stays, pick a Terminal style, add skill repositories</h3>
+        <p>A member who runs a newer Pi keeps it while Piagent runs its own pinned copy; /style picks the Terminal's look; piagent skills add brings in skill repositories such as mattpocock/skills.</p>
         <span class="update-more">Read more <svg class="icon" viewBox="0 0 24 24" aria-hidden="true"><use href="#icon-arrow-right"/></svg></span>
       </a>
     </div>

package/docs-site/en/mcp-approval.html

@@ -37,7 +37,7 @@
         <span class="brand-mark"><img src="/assets/piagent-logo.svg" alt="" width="28" height="28" /></span>
         <span class="brand-name"><b>Piagent</b> <span>Platform</span></span>
       </a>
-      <a class="version-badge" href="/en/whats-new" data-docs-version="v1.44.1" title="v1.44.1 docs · EN"><span class="dot"></span>v1.44.1</a>
+      <a class="version-badge" href="/en/whats-new" data-docs-version="v1.44.3" title="v1.44.3 docs · EN"><span class="dot"></span>v1.44.3</a>
       <nav class="top-nav" aria-label="Documentation">
         <a href="/en/quickstart">Docs</a>
         <a href="/en/whats-new">Changelog</a>

package/docs-site/en/mcp-auth.html

@@ -37,7 +37,7 @@
         <span class="brand-mark"><img src="/assets/piagent-logo.svg" alt="" width="28" height="28" /></span>
         <span class="brand-name"><b>Piagent</b> <span>Platform</span></span>
       </a>
-      <a class="version-badge" href="/en/whats-new" data-docs-version="v1.44.1" title="v1.44.1 docs · EN"><span class="dot"></span>v1.44.1</a>
+      <a class="version-badge" href="/en/whats-new" data-docs-version="v1.44.3" title="v1.44.3 docs · EN"><span class="dot"></span>v1.44.3</a>
       <nav class="top-nav" aria-label="Documentation">
         <a href="/en/quickstart">Docs</a>
         <a href="/en/whats-new">Changelog</a>

package/docs-site/en/mcp-servers.html

@@ -37,7 +37,7 @@
         <span class="brand-mark"><img src="/assets/piagent-logo.svg" alt="" width="28" height="28" /></span>
         <span class="brand-name"><b>Piagent</b> <span>Platform</span></span>
       </a>
-      <a class="version-badge" href="/en/whats-new" data-docs-version="v1.44.1" title="v1.44.1 docs · EN"><span class="dot"></span>v1.44.1</a>
+      <a class="version-badge" href="/en/whats-new" data-docs-version="v1.44.3" title="v1.44.3 docs · EN"><span class="dot"></span>v1.44.3</a>
       <nav class="top-nav" aria-label="Documentation">
         <a href="/en/quickstart">Docs</a>
         <a href="/en/whats-new">Changelog</a>

package/docs-site/en/mcp.html

@@ -37,7 +37,7 @@
         <span class="brand-mark"><img src="/assets/piagent-logo.svg" alt="" width="28" height="28" /></span>
         <span class="brand-name"><b>Piagent</b> <span>Platform</span></span>
       </a>
-      <a class="version-badge" href="/en/whats-new" data-docs-version="v1.44.1" title="v1.44.1 docs · EN"><span class="dot"></span>v1.44.1</a>
+      <a class="version-badge" href="/en/whats-new" data-docs-version="v1.44.3" title="v1.44.3 docs · EN"><span class="dot"></span>v1.44.3</a>
       <nav class="top-nav" aria-label="Documentation">
         <a href="/en/quickstart">Docs</a>
         <a href="/en/whats-new">Changelog</a>

package/docs-site/en/permissions.html

@@ -37,7 +37,7 @@
         <span class="brand-mark"><img src="/assets/piagent-logo.svg" alt="" width="28" height="28" /></span>
         <span class="brand-name"><b>Piagent</b> <span>Platform</span></span>
       </a>
-      <a class="version-badge" href="/en/whats-new" data-docs-version="v1.44.1" title="v1.44.1 docs · EN"><span class="dot"></span>v1.44.1</a>
+      <a class="version-badge" href="/en/whats-new" data-docs-version="v1.44.3" title="v1.44.3 docs · EN"><span class="dot"></span>v1.44.3</a>
       <nav class="top-nav" aria-label="Documentation">
         <a href="/en/quickstart">Docs</a>
         <a href="/en/whats-new">Changelog</a>

package/docs-site/en/profiles.html

@@ -37,7 +37,7 @@
         <span class="brand-mark"><img src="/assets/piagent-logo.svg" alt="" width="28" height="28" /></span>
         <span class="brand-name"><b>Piagent</b> <span>Platform</span></span>
       </a>
-      <a class="version-badge" href="/en/whats-new" data-docs-version="v1.44.1" title="v1.44.1 docs · EN"><span class="dot"></span>v1.44.1</a>
+      <a class="version-badge" href="/en/whats-new" data-docs-version="v1.44.3" title="v1.44.3 docs · EN"><span class="dot"></span>v1.44.3</a>
       <nav class="top-nav" aria-label="Documentation">
         <a href="/en/quickstart">Docs</a>
         <a href="/en/whats-new">Changelog</a>

package/docs-site/en/quickstart.html

@@ -37,7 +37,7 @@
         <span class="brand-mark"><img src="/assets/piagent-logo.svg" alt="" width="28" height="28" /></span>
         <span class="brand-name"><b>Piagent</b> <span>Platform</span></span>
       </a>
-      <a class="version-badge" href="/en/whats-new" data-docs-version="v1.44.1" title="v1.44.1 docs · EN"><span class="dot"></span>v1.44.1</a>
+      <a class="version-badge" href="/en/whats-new" data-docs-version="v1.44.3" title="v1.44.3 docs · EN"><span class="dot"></span>v1.44.3</a>
       <nav class="top-nav" aria-label="Documentation">
         <a href="/en/quickstart" aria-current="page">Docs</a>
         <a href="/en/whats-new">Changelog</a>

package/docs-site/en/runtime.html

@@ -37,7 +37,7 @@
         <span class="brand-mark"><img src="/assets/piagent-logo.svg" alt="" width="28" height="28" /></span>
         <span class="brand-name"><b>Piagent</b> <span>Platform</span></span>
       </a>
-      <a class="version-badge" href="/en/whats-new" data-docs-version="v1.44.1" title="v1.44.1 docs · EN"><span class="dot"></span>v1.44.1</a>
+      <a class="version-badge" href="/en/whats-new" data-docs-version="v1.44.3" title="v1.44.3 docs · EN"><span class="dot"></span>v1.44.3</a>
       <nav class="top-nav" aria-label="Documentation">
         <a href="/en/quickstart">Docs</a>
         <a href="/en/whats-new">Changelog</a>

package/docs-site/en/scope.html

@@ -37,7 +37,7 @@
         <span class="brand-mark"><img src="/assets/piagent-logo.svg" alt="" width="28" height="28" /></span>
         <span class="brand-name"><b>Piagent</b> <span>Platform</span></span>
       </a>
-      <a class="version-badge" href="/en/whats-new" data-docs-version="v1.44.1" title="v1.44.1 docs · EN"><span class="dot"></span>v1.44.1</a>
+      <a class="version-badge" href="/en/whats-new" data-docs-version="v1.44.3" title="v1.44.3 docs · EN"><span class="dot"></span>v1.44.3</a>
       <nav class="top-nav" aria-label="Documentation">
         <a href="/en/quickstart">Docs</a>
         <a href="/en/whats-new">Changelog</a>

package/docs-site/en/security.html

@@ -37,7 +37,7 @@
         <span class="brand-mark"><img src="/assets/piagent-logo.svg" alt="" width="28" height="28" /></span>
         <span class="brand-name"><b>Piagent</b> <span>Platform</span></span>
       </a>
-      <a class="version-badge" href="/en/whats-new" data-docs-version="v1.44.1" title="v1.44.1 docs · EN"><span class="dot"></span>v1.44.1</a>
+      <a class="version-badge" href="/en/whats-new" data-docs-version="v1.44.3" title="v1.44.3 docs · EN"><span class="dot"></span>v1.44.3</a>
       <nav class="top-nav" aria-label="Documentation">
         <a href="/en/quickstart">Docs</a>
         <a href="/en/whats-new">Changelog</a>

package/docs-site/en/team.html

@@ -37,7 +37,7 @@
         <span class="brand-mark"><img src="/assets/piagent-logo.svg" alt="" width="28" height="28" /></span>
         <span class="brand-name"><b>Piagent</b> <span>Platform</span></span>
       </a>
-      <a class="version-badge" href="/en/whats-new" data-docs-version="v1.44.1" title="v1.44.1 docs · EN"><span class="dot"></span>v1.44.1</a>
+      <a class="version-badge" href="/en/whats-new" data-docs-version="v1.44.3" title="v1.44.3 docs · EN"><span class="dot"></span>v1.44.3</a>
       <nav class="top-nav" aria-label="Documentation">
         <a href="/en/quickstart">Docs</a>
         <a href="/en/whats-new">Changelog</a>

package/docs-site/en/update.html

@@ -37,7 +37,7 @@
         <span class="brand-mark"><img src="/assets/piagent-logo.svg" alt="" width="28" height="28" /></span>
         <span class="brand-name"><b>Piagent</b> <span>Platform</span></span>
       </a>
-      <a class="version-badge" href="/en/whats-new" data-docs-version="v1.44.1" title="v1.44.1 docs · EN"><span class="dot"></span>v1.44.1</a>
+      <a class="version-badge" href="/en/whats-new" data-docs-version="v1.44.3" title="v1.44.3 docs · EN"><span class="dot"></span>v1.44.3</a>
       <nav class="top-nav" aria-label="Documentation">
         <a href="/en/quickstart">Docs</a>
         <a href="/en/whats-new">Changelog</a>
@@ -145,9 +145,9 @@
   <h2 id="pin-for-a-team">Pin one release for a team</h2>
   <p>For a team rollout, install the exact Pi host and platform release, then run the installer in stable mode. The <code>--dry-run</code> step prints what would change.</p>
   <div class="command-card">
-    <header><span>Pinned install</span><button class="clip-btn" data-clip="npm install -g --ignore-scripts @earendil-works/pi-coding-agent@1.3.0&#10;npm install -g --ignore-scripts @piagent/platform@1.44.1&#10;piagent-install --stable --dry-run&#10;piagent-install --stable">Copy</button></header>
+    <header><span>Pinned install</span><button class="clip-btn" data-clip="npm install -g --ignore-scripts @earendil-works/pi-coding-agent@1.3.0&#10;npm install -g --ignore-scripts @piagent/platform@1.44.3&#10;piagent-install --stable --dry-run&#10;piagent-install --stable">Copy</button></header>
     <pre><code>npm install -g --ignore-scripts @earendil-works/pi-coding-agent@1.3.0
-npm install -g --ignore-scripts @piagent/platform@1.44.1
+npm install -g --ignore-scripts @piagent/platform@1.44.3
 piagent-install --stable --dry-run
 piagent-install --stable</code></pre>
   </div>

package/docs-site/en/whats-new.html

@@ -37,7 +37,7 @@
         <span class="brand-mark"><img src="/assets/piagent-logo.svg" alt="" width="28" height="28" /></span>
         <span class="brand-name"><b>Piagent</b> <span>Platform</span></span>
       </a>
-      <a class="version-badge" href="/en/whats-new" data-docs-version="v1.44.1" title="v1.44.1 docs · EN"><span class="dot"></span>v1.44.1</a>
+      <a class="version-badge" href="/en/whats-new" data-docs-version="v1.44.3" title="v1.44.3 docs · EN"><span class="dot"></span>v1.44.3</a>
       <nav class="top-nav" aria-label="Documentation">
         <a href="/en/quickstart">Docs</a>
         <a href="/en/whats-new" aria-current="page">Changelog</a>
@@ -108,7 +108,31 @@
 <div class="release-filter" role="toolbar" aria-label="Filter by kind of change"><button type="button" data-filter-kind="all" aria-pressed="true">All</button><button type="button" data-filter-kind="new" aria-pressed="false">New</button><button type="button" data-filter-kind="improved" aria-pressed="false">Improved</button><button type="button" data-filter-kind="fixed" aria-pressed="false">Fixed</button><button type="button" data-filter-kind="security" aria-pressed="false">Security</button></div>
 <section class="section releases" data-releases>
 <h2 id="latest" class="sr-only">Latest</h2>
-<article class="release latest" id="v1-44-1" data-release>
+<article class="release latest" id="v1-44-3" data-release>
+  <div class="release-meta"><a class="release-version" href="#v1-44-3">v1.44.3</a><time class="release-date" datetime="2026-10-28">Oct 28, 2026</time></div>
+  <div class="release-body">
+    <h3 data-toc-skip id="v1-44-3-title">Prompt injection cannot quietly read the system</h3>
+    <p>Text in a page, file, memory or helper answer can no longer send data to an unknown site, read credentials in Bypass or steer the agent without the member seeing it.</p>
+    <ul class="release-items">
+      <li data-kind="security"><span class="kind kind-security">Security</span><span>web_fetch reads documentation and registry sites freely; another site is asked about once per conversation, and an address there with a query or fragment every time.</span></li>
+      <li data-kind="security"><span class="kind kind-security">Security</span><span>Helper answers and team memory results reach the agent inside a data fence it cannot close; the agent never shows its configuration or credentials or asks for a secret on their word.</span></li>
+      <li data-kind="security"><span class="kind kind-security">Security</span><span>In Bypass, run_on_host still asks when a command reaches credentials: ~/.ssh, ~/.pi, .env, auth.json, keys, the Keychain or the environment.</span></li>
+    </ul>
+  </div>
+</article>
+<article class="release" id="v1-44-2" data-release>
+  <div class="release-meta"><a class="release-version" href="#v1-44-2">v1.44.2</a><time class="release-date" datetime="2026-10-28">Oct 28, 2026</time></div>
+  <div class="release-body">
+    <h3 data-toc-skip id="v1-44-2-title">The company harness follows the size of a change</h3>
+    <p>A small change ends after its checks without a review; a risky one has its checks and review required. The main agent may keep a few quick web lookups beside the research helper.</p>
+    <ul class="release-items">
+      <li data-kind="new"><span class="kind kind-new">New</span><span>workflow.main_web_lookups (0 to 5) lets the main agent make that many quick web_search or web_fetch calls per message beside the research helper.</span></li>
+      <li data-kind="improved"><span class="kind kind-improved">Improved</span><span>Risk lanes, on by default: a change of at most 2 files and 40 lines that touches no sensitive file ends after its checks, without the reviewer. workflow.lanes: false turns them off.</span></li>
+      <li data-kind="improved"><span class="kind kind-improved">Improved</span><span>A risky change (migration, auth, CI, dependency or AGENTS.md file, a complex request, over 12 files or 400 lines) must pass its checks and review even where they are only suggested.</span></li>
+    </ul>
+  </div>
+</article>
+<article class="release" id="v1-44-1" data-release>
   <div class="release-meta"><a class="release-version" href="#v1-44-1">v1.44.1</a><time class="release-date" datetime="2026-10-28">Oct 28, 2026</time></div>
   <div class="release-body">
     <h3 data-toc-skip id="v1-44-1-title">Your own Pi stays, pick a Terminal style, add skill repositories</h3>
@@ -403,38 +427,35 @@
     </ul>
   </div>
 </article>
-<article class="release" id="v1-36-1" data-release>
-  <div class="release-meta"><a class="release-version" href="#v1-36-1">v1.36.1</a><time class="release-date" datetime="2026-10-22">Oct 22, 2026</time></div>
-  <div class="release-body">
-    <h3 data-toc-skip id="v1-36-1-title">A brief Agent Watch failure no longer stops a task</h3>
-    <p>When Agent Watch briefly cannot reach a running Studio, Piagent asks again for up to 3 minutes instead of stopping the task.</p>
-    <ul class="release-items">
-      <li data-kind="improved"><span class="kind kind-improved">Improved</span><span>Each wait is logged locally and reported to Studio in Logs → &quot;Mất kết nối&quot;; a refused key or report still fails at once.</span></li>
-      <li data-kind="fixed"><span class="kind kind-fixed">Fixed</span><span>One failed grant renewal through Agent Watch stopped a 25-minute task; it is now asked again, waiting longer each time, for up to 3 minutes.</span></li>
-      <li data-kind="fixed"><span class="kind kind-fixed">Fixed</span><span>Closing the round's run goes through the same wait, so a passing gateway error no longer fails a turn whose work is done.</span></li>
-    </ul>
-  </div>
-</article>
-<article class="release" id="v1-36-0" data-release>
-  <div class="release-meta"><a class="release-version" href="#v1-36-0">v1.36.0</a><time class="release-date" datetime="2026-10-21">Oct 21, 2026</time></div>
-  <div class="release-body">
-    <h3 data-toc-skip id="v1-36-0-title">Team memory learns from what went wrong</h3>
-    <p>Memory learns from member feedback and repeated errors, keeps only completed tasks that add something, and proposes failing skills for review.</p>
-    <ul class="release-items">
-      <li data-kind="new"><span class="kind kind-new">New</span><span>What memory hands a round goes back to Studio with it, so Studio rates notes by the member's next words and stops briefing wrong ones.</span></li>
-      <li data-kind="new"><span class="kind kind-new">New</span><span>A command that fails the same way twice in a round becomes a lesson that keeps the first error line, with no guessed cause.</span></li>
-      <li data-kind="new"><span class="kind kind-new">New</span><span>When 3 of a skill's last rounds failed, Piagent writes a proposal to <code>.pi/piagent-state/skill-proposals/</code>, at most weekly; it never edits skills.</span></li>
-      <li data-kind="improved"><span class="kind kind-improved">Improved</span><span>Repository memory skips completed tasks that change only build output, caches, logs or Piagent's state, or repeat files already known.</span></li>
-    </ul>
-    <p class="release-requires"><strong>Requires:</strong> Agent Studio 0.37.0</p>
-  </div>
-</article>
 </section>
 <section class="section archive">
   <h2 id="archive">Earlier releases</h2>
   <p class="section-lead">Older releases, grouped by month. Open a month to see every change.</p>
   <details class="release-archive">
-    <summary><span>October 2026</span><span class="archive-count">52</span></summary>
+    <summary><span>October 2026</span><span class="archive-count">54</span></summary>
+    <div class="archive-row" id="v1-36-1">
+      <div class="archive-head"><a class="release-version" href="#v1-36-1">v1.36.1</a> <span class="release-date">Oct 22, 2026</span></div>
+      <div class="archive-body">
+        <p><strong>A brief Agent Watch failure no longer stops a task</strong> — When Agent Watch briefly cannot reach a running Studio, Piagent asks again for up to 3 minutes instead of stopping the task.</p>
+        <ul class="release-items">
+        <li data-kind="improved"><span class="kind kind-improved">Improved</span><span>Each wait is logged locally and reported to Studio in Logs → &quot;Mất kết nối&quot;; a refused key or report still fails at once.</span></li>
+        <li data-kind="fixed"><span class="kind kind-fixed">Fixed</span><span>One failed grant renewal through Agent Watch stopped a 25-minute task; it is now asked again, waiting longer each time, for up to 3 minutes.</span></li>
+        <li data-kind="fixed"><span class="kind kind-fixed">Fixed</span><span>Closing the round's run goes through the same wait, so a passing gateway error no longer fails a turn whose work is done.</span></li>
+        </ul>
+      </div>
+    </div>
+    <div class="archive-row" id="v1-36-0">
+      <div class="archive-head"><a class="release-version" href="#v1-36-0">v1.36.0</a> <span class="release-date">Oct 21, 2026</span></div>
+      <div class="archive-body">
+        <p><strong>Team memory learns from what went wrong</strong> — Memory learns from member feedback and repeated errors, keeps only completed tasks that add something, and proposes failing skills for review.</p>
+        <ul class="release-items">
+        <li data-kind="new"><span class="kind kind-new">New</span><span>What memory hands a round goes back to Studio with it, so Studio rates notes by the member's next words and stops briefing wrong ones.</span></li>
+        <li data-kind="new"><span class="kind kind-new">New</span><span>A command that fails the same way twice in a round becomes a lesson that keeps the first error line, with no guessed cause.</span></li>
+        <li data-kind="new"><span class="kind kind-new">New</span><span>When 3 of a skill's last rounds failed, Piagent writes a proposal to <code>.pi/piagent-state/skill-proposals/</code>, at most weekly; it never edits skills.</span></li>
+        <li data-kind="improved"><span class="kind kind-improved">Improved</span><span>Repository memory skips completed tasks that change only build output, caches, logs or Piagent's state, or repeat files already known.</span></li>
+        </ul>
+      </div>
+    </div>
     <div class="archive-row" id="v1-35-1">
       <div class="archive-head"><a class="release-version" href="#v1-35-1">v1.35.1</a> <span class="release-date">Oct 21, 2026</span></div>
       <div class="archive-body">

package/docs-site/en/windows.html

@@ -37,7 +37,7 @@
         <span class="brand-mark"><img src="/assets/piagent-logo.svg" alt="" width="28" height="28" /></span>
         <span class="brand-name"><b>Piagent</b> <span>Platform</span></span>
       </a>
-      <a class="version-badge" href="/en/whats-new" data-docs-version="v1.44.1" title="v1.44.1 docs · EN"><span class="dot"></span>v1.44.1</a>
+      <a class="version-badge" href="/en/whats-new" data-docs-version="v1.44.3" title="v1.44.3 docs · EN"><span class="dot"></span>v1.44.3</a>
       <nav class="top-nav" aria-label="Documentation">
         <a href="/en/quickstart">Docs</a>
         <a href="/en/whats-new">Changelog</a>

package/docs-site/en/workflows.html

@@ -37,7 +37,7 @@
         <span class="brand-mark"><img src="/assets/piagent-logo.svg" alt="" width="28" height="28" /></span>
         <span class="brand-name"><b>Piagent</b> <span>Platform</span></span>
       </a>
-      <a class="version-badge" href="/en/whats-new" data-docs-version="v1.44.1" title="v1.44.1 docs · EN"><span class="dot"></span>v1.44.1</a>
+      <a class="version-badge" href="/en/whats-new" data-docs-version="v1.44.3" title="v1.44.3 docs · EN"><span class="dot"></span>v1.44.3</a>
       <nav class="top-nav" aria-label="Documentation">
         <a href="/en/quickstart">Docs</a>
         <a href="/en/whats-new">Changelog</a>

package/docs-site/index.html

@@ -36,7 +36,7 @@
         <span class="brand-mark"><img src="/assets/piagent-logo.svg" alt="" width="28" height="28" /></span>
         <span class="brand-name"><b>Piagent</b> <span>Platform</span></span>
       </a>
-      <a class="version-badge" href="/whats-new" data-docs-version="v1.44.1" title="v1.44.1 docs · VI"><span class="dot"></span>v1.44.1</a>
+      <a class="version-badge" href="/whats-new" data-docs-version="v1.44.3" title="v1.44.3 docs · VI"><span class="dot"></span>v1.44.3</a>
       <nav class="top-nav" aria-label="Tài liệu">
         <a href="/quickstart">Tài liệu</a>
         <a href="/whats-new">Changelog</a>
@@ -56,7 +56,7 @@
   <div class="hero-bg" aria-hidden="true"></div>
   <div class="hero-glow" aria-hidden="true"></div>
   <div class="home-wrap">
-    <a class="hero-pill" href="/whats-new#v1-44-1"><b>v1.44.1</b><span>Giữ Pi của bạn, chọn giao diện Terminal, thêm repo skill</span><svg class="icon" viewBox="0 0 24 24" aria-hidden="true"><use href="#icon-arrow-right"/></svg></a>
+    <a class="hero-pill" href="/whats-new#v1-44-3"><b>v1.44.3</b><span>Prompt injection không lặng lẽ đọc được hệ thống</span><svg class="icon" viewBox="0 0 24 24" aria-hidden="true"><use href="#icon-arrow-right"/></svg></a>
     <h1>Coding agent cho cả team, <span class="grad">kiểm tra từng bước.</span></h1>
     <p class="hero-sub">Guard chặn tool call nguy hiểm trước khi chạy. Harness của team tự chạy check và cho subagent review. Một dashboard cho Terminal và trình duyệt, với model của bạn hoặc của công ty.</p>
     <div class="hero-cta">
@@ -99,7 +99,7 @@
       <div><strong><span data-count="54">54</span><em>/54</em></strong><span>task giải quyết trong benchmark production</span><small>codex-cli cùng model: 48/54</small></div>
       <div><strong>−<span data-count="61">61</span><em>%</em></strong><span>fresh token trên cùng workload</span><small>khoảng tin cậy 95%: ít nhất −51,6%</small></div>
       <div><strong><span data-count="52">52</span><em>/52</em></strong><span>mẫu secret bị che trong output</span><small>0/30 văn bản thường bị che nhầm</small></div>
-      <div><strong><span data-count="121">121</span></strong><span>bản phát hành từ 21/07/2026</span><small>4.400+ test tự động trên macOS và Linux</small></div>
+      <div><strong><span data-count="123">123</span></strong><span>bản phát hành từ 21/07/2026</span><small>4.400+ test tự động trên macOS và Linux</small></div>
     </div>
   </div>
 </section>
@@ -280,22 +280,22 @@ pi                    # Terminal</code></pre></div></div>
       <p>Mỗi bản ghi thay đổi gì và cần bản nào của Studio hay Agent Watch. <a href="/whats-new">Xem toàn bộ changelog</a>.</p>
     </div>
     <div class="updates">
-      <a class="update" href="/whats-new#v1-44-1" data-reveal>
-        <span class="update-meta"><span class="release-version">v1.44.1</span>28/10/2026</span>
-        <h3>Giữ Pi của bạn, chọn giao diện Terminal, thêm repo skill</h3>
-        <p>Dev đang dùng Pi mới hơn giữ nguyên Pi của mình, Piagent chạy bản Pi riêng đúng bản pin; /style chọn giao diện Terminal; piagent skills add thêm repo skill như mattpocock/skills.</p>
+      <a class="update" href="/whats-new#v1-44-3" data-reveal>
+        <span class="update-meta"><span class="release-version">v1.44.3</span>28/10/2026</span>
+        <h3>Prompt injection không lặng lẽ đọc được hệ thống</h3>
+        <p>Nội dung trong trang web, file, memory hay câu trả lời của helper không còn gửi dữ liệu tới trang lạ, đọc credential ở Bypass hay điều khiển agent mà member không biết.</p>
         <span class="update-more">Xem chi tiết <svg class="icon" viewBox="0 0 24 24" aria-hidden="true"><use href="#icon-arrow-right"/></svg></span>
       </a>
-      <a class="update" href="/whats-new#v1-43-9" data-reveal>
-        <span class="update-meta"><span class="release-version">v1.43.9</span>27/10/2026</span>
-        <h3>Đủ skill đã cài, và mở file agent gửi lại</h3>
-        <p>Skill trong plugin Claude và Codex, như superpowers, đến được agent; file agent gửi lại mở ngay trong web; hộp chọn thư mục chạy trên Windows.</p>
+      <a class="update" href="/whats-new#v1-44-2" data-reveal>
+        <span class="update-meta"><span class="release-version">v1.44.2</span>28/10/2026</span>
+        <h3>Harness công ty theo cỡ thay đổi</h3>
+        <p>Thay đổi nhỏ xong sau khi check, không cần review; thay đổi rủi ro bắt buộc check và review. Main agent được tra web nhanh vài lần bên cạnh research helper.</p>
         <span class="update-more">Xem chi tiết <svg class="icon" viewBox="0 0 24 24" aria-hidden="true"><use href="#icon-arrow-right"/></svg></span>
       </a>
-      <a class="update" href="/whats-new#v1-43-6" data-reveal>
-        <span class="update-meta"><span class="release-version">v1.43.6</span>27/10/2026</span>
-        <h3>Xem thay đổi của agent ngay khi đang chạy</h3>
-        <p>Thay đổi và Review cập nhật theo lượt đang chạy, thấy sai thì dừng sớm được, và lượt còn chạy không còn trông như đã xong.</p>
+      <a class="update" href="/whats-new#v1-44-1" data-reveal>
+        <span class="update-meta"><span class="release-version">v1.44.1</span>28/10/2026</span>
+        <h3>Giữ Pi của bạn, chọn giao diện Terminal, thêm repo skill</h3>
+        <p>Dev đang dùng Pi mới hơn giữ nguyên Pi của mình, Piagent chạy bản Pi riêng đúng bản pin; /style chọn giao diện Terminal; piagent skills add thêm repo skill như mattpocock/skills.</p>
         <span class="update-more">Xem chi tiết <svg class="icon" viewBox="0 0 24 24" aria-hidden="true"><use href="#icon-arrow-right"/></svg></span>
       </a>
     </div>

package/docs-site/mcp-approval.html

@@ -37,7 +37,7 @@
         <span class="brand-mark"><img src="/assets/piagent-logo.svg" alt="" width="28" height="28" /></span>
         <span class="brand-name"><b>Piagent</b> <span>Platform</span></span>
       </a>
-      <a class="version-badge" href="/whats-new" data-docs-version="v1.44.1" title="v1.44.1 docs · VI"><span class="dot"></span>v1.44.1</a>
+      <a class="version-badge" href="/whats-new" data-docs-version="v1.44.3" title="v1.44.3 docs · VI"><span class="dot"></span>v1.44.3</a>
       <nav class="top-nav" aria-label="Tài liệu">
         <a href="/quickstart">Tài liệu</a>
         <a href="/whats-new">Changelog</a>

package/docs-site/mcp-auth.html

@@ -37,7 +37,7 @@
         <span class="brand-mark"><img src="/assets/piagent-logo.svg" alt="" width="28" height="28" /></span>
         <span class="brand-name"><b>Piagent</b> <span>Platform</span></span>
       </a>
-      <a class="version-badge" href="/whats-new" data-docs-version="v1.44.1" title="v1.44.1 docs · VI"><span class="dot"></span>v1.44.1</a>
+      <a class="version-badge" href="/whats-new" data-docs-version="v1.44.3" title="v1.44.3 docs · VI"><span class="dot"></span>v1.44.3</a>
       <nav class="top-nav" aria-label="Tài liệu">
         <a href="/quickstart">Tài liệu</a>
         <a href="/whats-new">Changelog</a>

package/docs-site/mcp-servers.html

@@ -37,7 +37,7 @@
         <span class="brand-mark"><img src="/assets/piagent-logo.svg" alt="" width="28" height="28" /></span>
         <span class="brand-name"><b>Piagent</b> <span>Platform</span></span>
       </a>
-      <a class="version-badge" href="/whats-new" data-docs-version="v1.44.1" title="v1.44.1 docs · VI"><span class="dot"></span>v1.44.1</a>
+      <a class="version-badge" href="/whats-new" data-docs-version="v1.44.3" title="v1.44.3 docs · VI"><span class="dot"></span>v1.44.3</a>
       <nav class="top-nav" aria-label="Tài liệu">
         <a href="/quickstart">Tài liệu</a>
         <a href="/whats-new">Changelog</a>

package/docs-site/mcp.html

@@ -37,7 +37,7 @@
         <span class="brand-mark"><img src="/assets/piagent-logo.svg" alt="" width="28" height="28" /></span>
         <span class="brand-name"><b>Piagent</b> <span>Platform</span></span>
       </a>
-      <a class="version-badge" href="/whats-new" data-docs-version="v1.44.1" title="v1.44.1 docs · VI"><span class="dot"></span>v1.44.1</a>
+      <a class="version-badge" href="/whats-new" data-docs-version="v1.44.3" title="v1.44.3 docs · VI"><span class="dot"></span>v1.44.3</a>
       <nav class="top-nav" aria-label="Tài liệu">
         <a href="/quickstart">Tài liệu</a>
         <a href="/whats-new">Changelog</a>

package/docs-site/permissions.html

@@ -37,7 +37,7 @@
         <span class="brand-mark"><img src="/assets/piagent-logo.svg" alt="" width="28" height="28" /></span>
         <span class="brand-name"><b>Piagent</b> <span>Platform</span></span>
       </a>
-      <a class="version-badge" href="/whats-new" data-docs-version="v1.44.1" title="v1.44.1 docs · VI"><span class="dot"></span>v1.44.1</a>
+      <a class="version-badge" href="/whats-new" data-docs-version="v1.44.3" title="v1.44.3 docs · VI"><span class="dot"></span>v1.44.3</a>
       <nav class="top-nav" aria-label="Tài liệu">
         <a href="/quickstart">Tài liệu</a>
         <a href="/whats-new">Changelog</a>

package/docs-site/profiles.html

@@ -37,7 +37,7 @@
         <span class="brand-mark"><img src="/assets/piagent-logo.svg" alt="" width="28" height="28" /></span>
         <span class="brand-name"><b>Piagent</b> <span>Platform</span></span>
       </a>
-      <a class="version-badge" href="/whats-new" data-docs-version="v1.44.1" title="v1.44.1 docs · VI"><span class="dot"></span>v1.44.1</a>
+      <a class="version-badge" href="/whats-new" data-docs-version="v1.44.3" title="v1.44.3 docs · VI"><span class="dot"></span>v1.44.3</a>
       <nav class="top-nav" aria-label="Tài liệu">
         <a href="/quickstart">Tài liệu</a>
         <a href="/whats-new">Changelog</a>

package/docs-site/quickstart.html

@@ -37,7 +37,7 @@
         <span class="brand-mark"><img src="/assets/piagent-logo.svg" alt="" width="28" height="28" /></span>
         <span class="brand-name"><b>Piagent</b> <span>Platform</span></span>
       </a>
-      <a class="version-badge" href="/whats-new" data-docs-version="v1.44.1" title="v1.44.1 docs · VI"><span class="dot"></span>v1.44.1</a>
+      <a class="version-badge" href="/whats-new" data-docs-version="v1.44.3" title="v1.44.3 docs · VI"><span class="dot"></span>v1.44.3</a>
       <nav class="top-nav" aria-label="Tài liệu">
         <a href="/quickstart" aria-current="page">Tài liệu</a>
         <a href="/whats-new">Changelog</a>

package/docs-site/releases.json

@@ -1,4 +1,66 @@
 [
+  {
+    "version": "1.44.3",
+    "date": "2026-10-28",
+    "status": "stable",
+    "title": {
+      "en": "Prompt injection cannot quietly read the system",
+      "vi": "Prompt injection không lặng lẽ đọc được hệ thống"
+    },
+    "summary": {
+      "en": "Text in a page, file, memory or helper answer can no longer send data to an unknown site, read credentials in Bypass or steer the agent without the member seeing it.",
+      "vi": "Nội dung trong trang web, file, memory hay câu trả lời của helper không còn gửi dữ liệu tới trang lạ, đọc credential ở Bypass hay điều khiển agent mà member không biết."
+    },
+    "items": [
+      {
+        "kind": "security",
+        "en": "web_fetch reads documentation and registry sites freely; another site is asked about once per conversation, and an address there with a query or fragment every time.",
+        "vi": "web_fetch đọc tự do trang tài liệu và registry; trang khác hỏi member một lần mỗi cuộc trò chuyện, địa chỉ có query hoặc fragment thì hỏi mỗi lần."
+      },
+      {
+        "kind": "security",
+        "en": "Helper answers and team memory results reach the agent inside a data fence it cannot close; the agent never shows its configuration or credentials or asks for a secret on their word.",
+        "vi": "Câu trả lời của helper và kết quả team memory tới agent trong rào dữ liệu không thể đóng; agent không lộ cấu hình, credential hay xin bí mật theo lời của chúng."
+      },
+      {
+        "kind": "security",
+        "en": "In Bypass, run_on_host still asks when a command reaches credentials: ~/.ssh, ~/.pi, .env, auth.json, keys, the Keychain or the environment.",
+        "vi": "Ở Bypass, run_on_host vẫn hỏi khi lệnh đụng credential: ~/.ssh, ~/.pi, .env, auth.json, key, Keychain hoặc biến môi trường."
+      }
+    ],
+    "requires": null
+  },
+  {
+    "version": "1.44.2",
+    "date": "2026-10-28",
+    "status": "stable",
+    "title": {
+      "en": "The company harness follows the size of a change",
+      "vi": "Harness công ty theo cỡ thay đổi"
+    },
+    "summary": {
+      "en": "A small change ends after its checks without a review; a risky one has its checks and review required. The main agent may keep a few quick web lookups beside the research helper.",
+      "vi": "Thay đổi nhỏ xong sau khi check, không cần review; thay đổi rủi ro bắt buộc check và review. Main agent được tra web nhanh vài lần bên cạnh research helper."
+    },
+    "items": [
+      {
+        "kind": "improved",
+        "en": "Risk lanes, on by default: a change of at most 2 files and 40 lines that touches no sensitive file ends after its checks, without the reviewer. workflow.lanes: false turns them off.",
+        "vi": "Risk lanes, bật mặc định: thay đổi tối đa 2 file, 40 dòng, không chạm file nhạy cảm xong sau khi check, không gọi reviewer. workflow.lanes: false để tắt."
+      },
+      {
+        "kind": "improved",
+        "en": "A risky change (migration, auth, CI, dependency or AGENTS.md file, a complex request, over 12 files or 400 lines) must pass its checks and review even where they are only suggested.",
+        "vi": "Thay đổi rủi ro (migration, auth, CI, dependency, AGENTS.md, yêu cầu phức tạp, hơn 12 file hoặc 400 dòng) bắt buộc qua check và review kể cả khi Harness chỉ đặt suggest."
+      },
+      {
+        "kind": "new",
+        "en": "workflow.main_web_lookups (0 to 5) lets the main agent make that many quick web_search or web_fetch calls per message beside the research helper.",
+        "vi": "workflow.main_web_lookups (0 đến 5) cho main agent tra web_search hoặc web_fetch nhanh chừng ấy lần mỗi tin nhắn, bên cạnh research helper."
+      }
+    ],
+    "requires": null
+  },
   {
     "version": "1.44.1",
     "date": "2026-10-28",

package/docs-site/runtime.html

@@ -37,7 +37,7 @@
         <span class="brand-mark"><img src="/assets/piagent-logo.svg" alt="" width="28" height="28" /></span>
         <span class="brand-name"><b>Piagent</b> <span>Platform</span></span>
       </a>
-      <a class="version-badge" href="/whats-new" data-docs-version="v1.44.1" title="v1.44.1 docs · VI"><span class="dot"></span>v1.44.1</a>
+      <a class="version-badge" href="/whats-new" data-docs-version="v1.44.3" title="v1.44.3 docs · VI"><span class="dot"></span>v1.44.3</a>
       <nav class="top-nav" aria-label="Tài liệu">
         <a href="/quickstart">Tài liệu</a>
         <a href="/whats-new">Changelog</a>