Product status

v1.4.0 includes Skills catalog/import/version bindings, prepared Docker script jobs, local accounts and OIDC, project bearer/OAuth, CLI, local Bleve knowledge, optional RagBox, themes and project ordering. All are part of the Apache-2.0 application.

Boundaries

• Catalog inclusion does not establish script compatibility or safety. Administrators review and prepare each execution profile. Docker is required only for execution.
• Clients decide when to request instructions and tools; adding a Skill does not force a model to activate it or transfer attachments.
• Local Bleve is full-text search, without OCR or mandatory embeddings. External semantic behavior depends on RagBox.
• Market Docker entries are a limited stdio workflow, not general Compose orchestration.
• CLI allowlists are not OS isolation; Windows process-tree cancellation remains limited.
• PostgreSQL does not replace every SQLite table; external log connectivity does not establish complete audit delivery.
• Project order and theme are browser-local. The reload selection fix is marked separately in release notes.
• Local knowledge upload/reindex can fail with missing bearer token, including custom admin-port configurations. Do not assume upload succeeded; inspect its error and keep original files.

PolicyBox has been removed. Use migration for affected projects. These limits are not release promises or dates.