Skip to main content

AgentPaaS v0.5.1 release notes

Release date: 2026-10-13

AgentPaaS v0.5.1 is a robustness patch on the 0.5 customer path. Hermes and the AgentPaaS CLI remain the documented way to pack, deploy, and invoke. This release tightens cost enforcement, model failover, invoke retry, workflow wait errors, and PII handling.

Breaking changes​

Custom PII patterns are no longer accepted. Policy validate and pack refuse them. An agent already deployed with custom patterns fails closed, with no upstream call, until you repack it with 0.5.1.

Built-in detectors still work. The names are CreditCard, Ssn, Email, DriversLicense, and Key. There is no phone-number detection and no Phone built-in.

A 0.5.0 lock that only stamps a cost ceiling does not need a repack. See the upgrade notes.

Upgrade notes​

Install the 0.5.1 release, then verify the CLI:

brew update
brew upgrade --cask AgentPaaS-ai/homebrew-tap/agentpaas
agentpaas version
agentpaas doctor

The 0.5.0 CLI installed with Homebrew already accepts policy version 1.1 with llm_budget.max_cost_usd set to 0.00. It stamps that lock the same way as 0.5.1, and Cloud enforces the cost ceiling the same way. That stamp does not need a repack.

Custom-pattern agents fail closed until you repack with 0.5.1 and keep only the built-in detectors.

Added​

None recorded for this release.

Changed​

  • PII controls accept the five built-in detectors only: CreditCard, Ssn, Email, DriversLicense, and Key. Custom patterns are refused. See LLM governance.
  • agentpaas pack stamps llm_budget and PII settings into the signed lock. The secret value is not copied into the bundle or container.

Deprecated​

None recorded for this release.

Removed​

  • Custom PII patterns, including phone-number patterns. Phone numbers are not detected.

Fixed​

  • A cost ceiling is refused before egress. When recorded spend reaches llm_budget.max_cost_usd, the call stops before an egress allow.
  • Model ids that include a provider slash are priced, so the cost ceiling applies to those calls.
  • Virtual-model failover runs when the primary model returns HTTP 429 or HTTP 5xx.
  • An identical invoke retried while you are at the concurrency limit returns the run that is already waiting. It no longer returns HTTP 500.
  • A workflow wait fails with the exact error live_call_wait_expired when the parent time budget ends first, and seat_wait_timeout when a child waits too long for a seat. See Workflow waiting and capacity.
  • The Logs view can filter by event type.
  • Reasoning effort is sent on the model call, including max.
  • A daemon pipeline is registered before invoke returns, and orphan reconciliation no longer stops a live pipeline stage.
  • Telemetry egress is hardened. Telemetry host aliases are rejected, workload telemetry environment variables are removed, and a models probe is recorded as egress.

Security​

  • Custom PII patterns are refused before a new lock is signed. A deployment that still carries them fails closed until you repack with 0.5.1.
  • The CLI includes Go toolchain and library updates for published security fixes.
  • Telemetry hosts and workload telemetry environment variables are denied rather than sent.

Known issues​

  • Hermes is the supported host path for this release. Other hosts can invoke the AgentPaaS CLI when you configure them yourself.
  • OAuth LLM credentials use the provider's public token endpoint and customer-managed refresh secret.

How to use the PII change​

Use built-in detectors only:

guardrails:
  pii:
    action: reject
    builtins: [CreditCard, Ssn, Email, DriversLicense, Key]

Then validate and pack:

agentpaas policy validate
agentpaas pack

If validate or pack reports that custom patterns are not supported, remove them and pack again with 0.5.1.