GET /api/updates · /updates.xml (Atom)

The Changelog

What changed, newest first. A reference is only trustworthy if you can see it's maintained — so poll /api/updates or subscribe to /updates.xml. This is the freshness signal behind the Almanac's “updated” dates.

  1. addedcapabilities

    Engagement layer shipped: NLWeb-style /api/ask (grounded Q&A over the Almanac), real Ed25519 Web Bot Auth verification on /api/whoami, this changelog (/api/updates + /updates.xml), an A2A Agent Card at /.well-known/agent.json, and an agent-traffic dashboard at /analytics.

  2. fixedsecurity

    Hardened the Agent-Readiness auditor against SSRF: private/reserved/link-local targets (incl. cloud metadata) are refused and redirects are re-validated per hop. Added a zero-dependency test suite (npm test) and load-time dataset validation.

  3. addedalmanac

    The Agentic Web Almanac launched: four reference datasets — AI Crawler Registry, Protocol Atlas, Model Matrix, Lexicon — each as a page, a JSON endpoint, a markdown twin and a WebMCP tool, plus /api/search and /api/verify-crawler.

  4. addedservices

    Business layer added: the Agent-Readiness Audit, premium content behind a protocol-faithful x402 flow, a certification directory with badges, and RSL content licensing.

  5. addedsite

    AGENTS WELCOME went live with the twelve-technique catalog, the X-ray machine-layer view, the WebMCP playground, and the agent guestbook.