Captivo Access changelog — 2026 · Page 10 of 13

What changed

• New: Fleet default connector log level + per-connector inherit

What changed

• New: Session recording retention

What changed

Fixes and refinements — see the changelog below for details.

What changed

• New: Move recording-consent gate from env to the console

What changed

• New: Maximum grant duration cap (time-boxed vendor access)

What changed

• New: Zero-Trust vendor source-IP allowlist

What changed

• New: Move retention / invite TTL / notification webhook to the console

What changed

• New: Leveled logging controlled live from the console

What changed

• New: Request-level logging for denials, upstream errors, slow dials

What changed

• Fixed: Disable upstream keep-alives to silence idle-channel log noise

What changed

• New: Fail fast on TLS-port mismatch + warn on http:// to a TLS port

What changed

Fixes and refinements — see the changelog below for details.

What changed

• New: Inject clipboard guard per site clipboardMode
• New: ClipboardMode in site resolution, API, and edit form
• New: ClipboardMode schema field

What changed

• New: Console Policy page with session controls
• New: Enforce idle timeout, max lifetime, concurrent cap
• New: Session-policy config + pure helpers
• New: SessionPolicy singleton schema

What changed

• New: Push egress policy to connectors (connect-time + live)
• New: Apply console-pushed egress policy (narrow-only, live)
• New: Policy frame for console-managed egress

What changed

• New: Recent-logs tail in telemetry + detail page card (A2)

What changed

• New: Connector detail page with live telemetry + recent activity
• New: Store connector telemetry + /connector-telemetry endpoint
• New: Telemetry counters + control-stream reporter
• New: Control-stream frames (ControlHello + Telemetry)

What changed

• New: In-console setup guide + manager-served one-command installer

What changed

• New: Larger site avatars; connector modal Done button closes it

What changed

Fixes and refinements — see the changelog below for details.

What changed

• New: Request-access in modal; notifications filter/search; recordings multi-select bulk delete

What changed

• Fixed: Connector add shows result-only (not re-prompt); grants + recordings spacing

What changed

Fixes and refinements — see the changelog below for details.

What changed

• New: Router.refresh instead of full-page reload on admin actions; users newest-first

What changed

• New: Grants + invites add-in-modal; role labels, grant cell, users invite button, stat-card hover
• New: One-command production setup (deploy/setup.sh) + docs