Skip to content

Release Notes

Use this section to publish customer-facing product changes.

2026-08-31 — Governed Extend and native runtime workflows through MCP

SchemAlign MCP can now support the governed Extend connector lifecycle when the signed-in user, OAuth authorization, organization RBAC, and organization MCP policy all permit the requested action.

Highlights:

  • inspect Extend connectors, versions, source files, quality state, adoption, governed Python runtimes, safe account metadata, and available SchemaDocks
  • create and revise draft connector versions using optimistic file hashes
  • validate connectors, prepare isolated dependency environments, run eligible version tests, and publish immutable versions
  • declare logical native runtime requirements without hardcoding organization bundle paths into connector source
  • discover institution-managed native bundles and evaluate ready versions for connector compatibility
  • create native bundle records and upload explicitly licensed archives only after the user provides the required institutional attestation
  • preserve safe extraction, validation, immutable archive/tree digests, and exact-digest approval
  • install published connector versions and approve their declared capabilities and native bundle bindings
  • test installed connectors through the dedicated runner with organization approvals, account references, and optional SchemaDock routing
  • reject raw credential material from connector-test input
  • keep native bundle retirement/deletion, binding removal, connector disable/uninstall, and published-version mutation outside MCP
  • keep pipeline creation, editing, and execution unavailable through MCP

Existing AI-client connections may need to reconnect and approve the expanded OAuth request before using the new Extend administration and installation capabilities.

See MCP & AI Assistants for the current capability and security boundaries.

2026-08-26 — MCP developer observability

SchemAlign MCP now provides a broader read-only view of authorized pipeline structure and execution history, with separate organization controls for sensitive diagnostic data.

Highlights:

  • inspect sanitized pipeline graph nodes and edges
  • list pipeline runs and read an individual run's status, timing, and execution metadata
  • read exact stored log events only when separate diagnostic OAuth access and organization policy permit it
  • list artifact metadata without exposing file contents or storage locations
  • read supported text artifact contents when the organization's separate sensitive-content policy permits it
  • inspect persisted runtime-value observations used during pipeline execution
  • apply independent organization policy to graph, run history, exact logs, artifact metadata, artifact contents, and runtime values
  • recheck policy on every protected request so disabling a capability takes effect without reconnecting the AI client
  • keep all pipeline execution, retry, cancellation, and mutation unavailable

Exact logs are not sanitized or shortened and may contain sensitive values written by a pipeline. Enable that capability only for users and organizations where exact diagnostic access is appropriate.

2026-08-18 — SchemAlign MCP & ChatGPT

SchemAlign now supports secure, read-only access from supported AI assistants through SchemAlign MCP.

Highlights:

  • connect a SchemAlign deployment to SchemAlign MCP directly from Admin → MCP
  • connect ChatGPT through OAuth and operate as the signed-in SchemAlign user
  • the authorization page clearly distinguishes verified product identity from an unverified client's claimed name
  • organization access remains governed by current SchemAlign membership, RBAC, and organization MCP policy
  • organization visibility updates take effect immediately without requiring the AI client connection to be recreated
  • inspect authorized organizations, projects, pipeline metadata, and sanitized pipeline definitions
  • pipeline credential secrets remain outside MCP responses
  • manage deployment trust with Test Connection, Rotate Trust, Repair MCP Trust, and Disconnect
  • Repair MCP Trust provides customer-controlled recovery and intentionally requires AI clients to reconnect after trust is re-established
  • the initial MCP toolset was read-only and could not create, edit, or execute pipelines

See MCP & AI Assistants for setup, permissions, connection management, and ChatGPT guidance.

2026-08-15 — SchemaDock 0.1.5

SchemaDock 0.1.5 is the initial production release of SchemAlign's private-network connectivity agent.

Highlights:

  • outbound TLS-protected SchemaDock gateway connectivity over TCP 443
  • Windows service and Linux systemd installation paths
  • one-time bootstrap enrollment with persistent agent identity
  • Direct or SchemaDock Connection Routes for supported outbound nodes
  • File Get, File Put, HTTP Get, and Ethos Get routing support
  • governed SchemaDock transport for supported outbound Extend Source connectors
  • per-Dock destination Allow/Deny policy with deny-by-default Restricted mode
  • Open for testing mode for controlled connectivity validation
  • fail-closed routing with no silent Direct fallback
  • deterministic Linux packaging with LF shell scripts and preserved executable modes
  • upgrade/reinstall behavior that preserves enrolled identity
  • automatic reconnect/backoff behavior after temporary gateway interruption

See SchemaDock for installation, security, routing, policy, and troubleshooting guidance.

2026-07-30 — Pipeline Email Alerts

Pipeline-level email notifications are available from Workspace.

Highlights:

  • create alert rules from the Alerts control for an open pipeline
  • notify on Run started, Run succeeded, Run failed, Run cancelled, or the umbrella Run finished event
  • send a rule to one or more recipients
  • optionally attach SchemAlign's generated execution log
  • branded messages include organization, project, pipeline, trigger, run ID, timing, duration, and failure details when available
  • notification times use the configured display timezone and a 12-hour AM/PM format
  • alert delivery is best-effort and does not change the pipeline's execution result
  • edit or delete saved rules at any time; deleting a rule stops its notifications

See Configure Pipeline Email Alerts.

2026-07-22 — Managed SFTP and File Arrival

SchemAlign introduced a managed SFTP service for secure file exchange and event-driven pipelines.

Highlights:

  • organization-scoped SFTP Spaces
  • SSH public-key authentication for managed SFTP accounts
  • explicit per-Space read-only or read/modify grants
  • standard in/ and out/ folders inside each authorized Space
  • File Arrival triggers for stable files placed directly in in/
  • durable FIFO processing of detected file-arrival events
  • non-destructive detection: SchemAlign does not automatically move, delete, or archive an arriving file
  • {{trigger.file.sftp_path}} for referencing the canonical arriving-file path at runtime
  • tenant and filesystem isolation between organizations and unauthorized Spaces

See Use SchemAlign Managed SFTP.