What has shipped.

Developer top-up went live: prepaid inference credit can be bought with a card via Stripe (real charges). Provider payouts stay gated off while cross-border region support is worked out.

Verified self-serve model onboarding: a provider can add a public Hugging Face GGUF to the catalog end-to-end.

Catalog now exposes context length, and never mistakes a projector file for the model.

Zero-downtime coordinator deploys (no tunnel gap during rolls).

Admin catalog view + kill-switch for models; rejected provider registrations are now logged with reason.

Marketing copy corrected to reflect now-live payments and to frame free credit as tokens.

code_attested tier implemented end-to-end via an APNs app-targeted nonce challenge (goes live once the operator wires the APNs key and ships an aps-environment profile).

Provider shipped as a profile-bound macOS app; notarized DMG published to /dl with one-command setup.

Managed attestation deployed; distribution hardened; release/verify pipeline fixed against stale-DMG edge caching.

Operational readiness: real /readyz, alerts that can fire, and autohealing recreate-loop fix on the confidential-VM MIG.

Public-API and device-auth hardening: spoofable client-IP headers no longer trusted for rate limits; device-auth phishing path fixed.

MDM-mediated provider admission made live: real MDA-backed Macs register at the hardware trust tier.

Console redesign IA: account-tab menu, prominent live Network Stats chip, dropped the developer-facing trust-level selector.

First blog post published: how Umbra is building verifiable prompt privacy.

Wallet + trust console refined; logout hardened against cross-site requests.