What has shipped.

APNs app-targeted nonce challenges are operator-wired in production; admitted providers now elevate from Apple MDA hardware trust to code_attested.

Coordinator deploys now drain admitted inference before closing provider sockets; production promotion moved to manual dispatch or coordinator release tags.

HK-only provider payout onboarding opened after Stripe Connect platform activation; country enforcement remains fail-closed.

Developer top-up went live: prepaid inference credit can be bought with a card via Stripe (real charges). Provider payouts were initially held behind a separate feature gate.

Verified self-serve model onboarding: a provider can add a public Hugging Face GGUF to the catalog end-to-end.

Catalog now exposes context length, and never mistakes a projector file for the model.

Coordinator surge deploys preserve the HTTP origin (no tunnel gap during rolls); active-stream draining remains follow-up work.

Admin catalog view + kill-switch for models; rejected provider registrations are now logged with reason.

Marketing copy corrected to reflect now-live payments and to frame free credit as tokens.

code_attested tier implemented end-to-end via an APNs app-targeted nonce challenge; production operator wiring followed on July 13.

Provider shipped as a profile-bound macOS app; notarized DMG published to /dl with one-command setup.

Managed attestation deployed; distribution hardened; release/verify pipeline fixed against stale-DMG edge caching.

Operational readiness: real /readyz, alerts that can fire, and autohealing recreate-loop fix on the confidential-VM MIG.

Public-API and device-auth hardening: spoofable client-IP headers no longer trusted for rate limits; device-auth phishing path fixed.

MDM-mediated provider admission made live: real MDA-backed Macs register at the hardware trust tier.

Console redesign IA: account-tab menu, prominent live Network Stats chip, dropped the developer-facing trust-level selector.

First blog post published: how Umbra is building verifiable prompt privacy.

Wallet + trust console refined; logout hardened against cross-site requests.