// Changelog
What's new.
Every release, in plain language. Agent and platform.
Reboot classification and disk velocity tuning
This release focuses on making two everyday detections smarter and quieter.
New: reboot classification
Unexpected reboots are now classified, not just reported. AutoOps distinguishes a clean restart from a crash loop from a host that rebooted and failed to bring services back — so the incident tells you what kind of reboot it was, with the right severity.
Improved: disk velocity tuning
Disk projections are more accurate on hosts with bursty write patterns. The velocity model now smooths short spikes so you get a truer "projected full in N days" without false alarms from a one-off log burst.
Also in this release
- Anti-noise fingerprinting extended to cover reboot-related alert storms
- Lower agent memory footprint during process sampling
- Clearer evidence formatting on SSH detection findings
Silent Observer reports and firewall-aware recommendations
A release about trust and precision.
New: Silent Observer reports
You can now generate a shareable 7-day report showing everything AutoOps would have caught — and a verifiable audit trail proving it took zero actions. This is the proof-before-permission artifact behind Silent Observer Mode.
New: firewall-aware block recommendations
When AutoOps recommends blocking an attacker, it now tailors the command to the host's actual firewall — fail2ban, nftables, or iptables — so your engineer gets the one right command to run, not a guess.
Safety
- Prominent warning when a recommended block targets an internal or administrative IP range, so no one accidentally blocks their own infrastructure
- Recommendations are visibility-gated per tenant and off by default