Product documentation changelog.

Changelog

V5.4 — Full ERC-8004 loop + Tencent COS live

• The full ERC-8004 loop now fires. A successful Generate Proof anchors to ArchonProofRegistry and appends a Reputation Registry giveFeedback entry against Agent #97 (feedbackHash = the report hash), from a funded non-owner client — best-effort and non-blocking, so a reputation hiccup never fails a registry anchor. Verified on-chain (Agent #97's feedback count increments).
• Tencent Cloud COS artifact backup is live (region ap-hongkong): proof/report artifacts back up best-effort beside IPFS/Postgres, verifiable at /api/providers. The Hunyuan inference adapter stays ready/inert — OpenAI gpt-4o-mini remains the active enrichment model.

V5.3 — Enrichment reliability, reach & landing

• AI enrichment now records why any finding falls back to a deterministic explanation — per batch and as a distribution (timeout / rate-limit / 5xx / auth / JSON / schema) — so the real cause is diagnosable instead of opaque. Per-call timeout raised to 75s with one transient (429/5xx) retry, payloads trimmed to a tight code window, and a single malformed enrichment degrades only that finding rather than the whole batch. Detection stays deterministic-first.
• Docs side rails (left navigation + on-this-page) are now sticky and scroll independently; only the article column participates in page scroll.
• Surfaced the public pages: the Gas Observatory joins the top navigation; every contract links to its /address/<address> profile from the leaderboard, Contract Context, and the Sentinel watchlist; pasting an address into the ⌘K command palette jumps straight to its profile.
• Trimmed the workspace sidebar (Overview is the command center) — the Creator Workspace route is retained but unlinked.
• Landing: a restrained capabilities band surfaces the platform (Sentinel, Gas Observatory, CI / GitHub App, agent trust API + MCP) and a calm developers-and-resources strip adds the whitepaper, API reference, docs, and Observatory above the final call to action.
• Removed ELFA from the AI provider chain — ELFA is a crypto/market data API, not an LLM, so the chat-completions adapter could only ever 404 and risked silently winning the fallback. The chain is now OpenAI → deterministic templates, with the Tencent Hunyuan adapter ready and inert.

V5.2 — Address intelligence pages, badges & embeds

• Public /address/<address>: a permanent, indexed security profile for any Mantle contract — audit timeline with anchored proofs, build-attestation status, Sentinel freshness, gas profile, and challenges; clean "run the first scan" state for unknown addresses. No per-view RPC; OG cards + sitemap.
• GET /badge/<address>.svg: shields-style README badges (audit / attestation / gas variants), edge-cached, linking to the address page. Copy-paste markdown in the docs.
• Embeddable security card (/embed/address/<address>) for project sites.

V5.1 — Agent Trust API + MCP server

• GET /api/v1/verdict/:chainId/:address: a compact, EIP-191-signed contract-trust verdict (risk score, audit freshness, build attestation, open critical/high, proof tx, agentId 97). The signature recovers to Archon's ERC-8004 Agent #97 owner key, so any consumer verifies provenance offline. Cached per address/day, per-IP rate limited.
• packages/mcp: an MCP server (stdio + Streamable HTTP) exposing archon_scan_source, archon_verdict, archon_gas_report, archon_verify_proof — Archon as any AI agent's Mantle security sense. Setup docs for Claude Desktop/Code and generic clients.
• Verdicts are labeled risk intelligence with provenance, not safety guarantees.

V5.0 — Mantle Gas Observatory

• Public /observatory (no auth): receipt-calibrated DA cost per calldata byte, L2 base fee, 24h/7d/30d trends, and "what a typical transfer/swap/deploy costs on Mantle today" cards — every number traced to real receipts with sample sizes shown.
• Oracle-vs-receipt tracker: a standing chart of the legacy getL1Fee prediction vs the charged receipt l1Fee (the living version of ADR 0007), iframe-embeddable at /embed/observatory/oracle, snapshot JSON at /api/observatory.
• Calibration loop: one repeatable sampler worker feeds both the Observatory and the DA model (two-variable least-squares fit, version-stamped, validation error published); hard per-day RPC budget with backpressure.
• Methodology page documents sampling, the oracle-call caveat, calibration, and labeling.

V4.3 — VS Code extension

• packages/vscode: Archon findings as native diagnostics (severity-mapped, line-anchored) with report links; catalog-safe gas patches as local-only Code Actions; file-level + per-opportunity gas CodeLenses (estimates labeled). Thin client of the public API; offline degrades to a status-bar state, never popups.
• Packaged .vsix (≈6 KB) published as a GitHub release; Marketplace/Open VSX publication pending publisher accounts.

V4.2 — GitHub App server side (PR checks + autofix)

• Webhook receiver, signature verification, and a queued PR pipeline: scoped scan of changed Solidity, one updating check-run and one updating comment (force-push safe), findings with line links, gas result with labeled savings split, full-report link.
• Policy as code via archon.config.json (failOn, maxRegressionL2Gas, paths, rules.allow/deny) — shared semantics with the GitHub Action.
• /archon fix <id> autofix for catalog-safe gas rules only: compile-validated patch, pushed to Archon's own archon/fix-… branch as its own PR — never to user branches.
• Honest status: inert until the App registration completes; integrations.githubApp at /api/providers.

V4.1 — Verified build attestations

• New /app/attest: deterministic compile-and-compare between deployed Mantle runtime bytecode and claimed Solidity source — immutable references masked via the compiler's own immutableReferences, CBOR metadata trailer handled as a distinct partial-metadata result, config/compile failures reported as errors, never as mismatches.
• Every attestation gets a public, wallet-free verification page at /attest/<id> with the canonical result object and re-derivation instructions; the attestation hash is anchorable via ArchonProofRegistry's permissionless logAuditProof.
• Address-scan audit reports display an "Audited source = deployed bytecode (attested)" marker when a passing attestation exists for the scanned address.

V4.0 — Archon Sentinel: continuous audit for deployed contracts

• New /app/sentinel watchlist: deployed Mantle addresses are checked every cycle for bytecode drift, EIP-1967 implementation/admin drift, owner changes, and newly verified source (reduced mode for unverified bytecode, clearly labeled).
• Committed drift (debounced across two cycles) automatically re-scans the deployed source and diffs findings against the previous report — new vs resolved, risk before → after; re-scans are normal reports, eligible for on-chain proof anchoring.
• Honest audit-freshness scores per watch (fresh / aging / attention / stale / unaudited), in-app bell alerts, and Discord/Slack-compatible webhook alerts.
• Cycle discipline: batched RPC reads, hard per-cycle RPC budget with backpressure, per-cycle call counts logged.

V3.1 — Whitepaper v2, front-door overhaul, and DA-claim corrections

• Published whitepaper v2.0: citable PDF served at /whitepaper.pdf; this docs page is the aligned HTML edition with the same sections, claims, and labels (including Table 1, the oracle-vs-receipt divergence evidence).
• Regenerated the repository architecture diagram to the seven-layer system (the gas engine is now visible), rebuilt the README around live, linkable evidence, and adopted a standing doc-sync ritual (docs/DOC-SYNC.md).
• Corrected the DA narrative across landing, README, and CLI output: the legacy getL1Fee oracle under-reports Mantle's charged DA fee by ~99.96% (≈2,200–2,900×), and gas-report splits are explicitly labeled as identified-savings splits, not transaction fee splits.

V3.0 — Cloud provider layer, CLI, pricing

• AI enrichment now runs behind a pluggable provider interface (OpenAI live; ELFA and Tencent Cloud Hunyuan adapters built-in and inert until credentialed) with public status at /api/providers, plus a Tencent COS artifact-backup adapter.
• Shipped the zero-dependency archon-scan CLI (npx via github:Franlinozz/archon-cli) and a live CI Action demo repository with real green/red pull-request evidence.
• Published the /pricing page (all tiers free during the hackathon period) and repaired public demo-data contract names from their real source definitions.

V2.5 — Docs revamp

• Replaced the single-page docs experience with a Fumadocs-backed MDX documentation system.
• Added full information architecture across Introduction, Audit, Gas Optimizer, On-chain Proofs, Platform & API, and Resources.
• Added Mantle gas explanation with DA versus execution cost and a worked example.
• Added search, sidebar navigation, table-of-contents scroll spy, previous/next links, code copy support, and reading progress.

V2.4 — Real Cost Guard telemetry

• Cost Guard reads persisted gas reports and gas optimizations.
• Removed stale Mantle GasPriceOracle language that did not match receipt l1Fee evidence.

V2.3 — Real source imports

• Source import workflows were updated to use real inputs instead of placeholder flows.