Tango
Start free

Changelog

What shipped, and when. Dates are UTC.

All notable changes to Tango are recorded here. Dates are UTC.

[1.15.0] — 2026-08-27

Added

  • Partner lander for Agile Growth Labs: new /partners/agile-growth-labs co-branded page AGL can drive traffic to, emphasizing the operational risk of client-facing agent work and how AGL migrates agencies onto Tango without stopping live delivery. Includes a /partners directory and a "Become a partner" call to action.
  • Partner attribution: signups from a partner page carry a partner tag that is recorded on the new organization, enabling future revenue-share tracking.

Changed

  • Header navigation: removed Changelog from the top nav to reduce clutter.
  • Footer navigation: added Partners link and kept Changelog.

[1.14.0] — 2026-08-27

Added

  • Per-client revenue share: each client workspace carries its own share percentage back to an agency (e.g. 25% to AGL for one client, 35% for another), set by Tango super admins from the Organizations page. Off-boarding now inherits the client's configured rate instead of asking for one.
  • Stripe Connect payouts: organizations connect a Stripe Express account from the Organization page. When a client's invoice is paid, Tango transfers the share automatically, holds it while onboarding is incomplete, and reverses it on refunds or disputes. A payout ledger shows every accrual and its status.

[1.13.0] — 2026-08-27

Added

  • /agencies landing page: a direct-response page for AI-native marketing and AI implementation agencies — the pain of unmanaged agent fleets, per-client isolation, evidence-gated completion and human review, client-tool intake, proof you can hand a client, workforce on tap, onboarding, off-boarding and an agency FAQ. Primary CTA books a demo through the sales chat; secondary is self-serve signup. Linked from the site header, footer and homepage, and added to the sitemap.
  • Client off-boarding with agency revenue share: an organization owner or admin can hand a client workspace over as the client's own Tango organization. A preview shows exactly what moves; the nominated person on the client side accepts before anything happens. On acceptance the new organization is created and the client's tasks, projects, history, receipts, context, decisions, issues, events, credentials, integrations, intake rules, dedicated workers and members transfer in one transaction, with the transparency chain intact.
  • Referred organizations: an accepted off-board records an ongoing revenue share for the originating organization, shown with status and start date on the Organization page. Requests, cancellations and completed transfers are written to the transparency log on both sides.
  • Docs: new guide at /docs/guides/offboarding, indexed for search and listed in llms.txt.

[1.12.0] — 2026-08-27

Changed

  • Public site and docs refresh: the marketing site, documentation hub and agent-facing files now describe the platform as it actually ships. The homepage gained sections on client integrations and intake, proof of work (evidence gates, mandatory human review of agent completions, task discussion, terminal statuses) and the workforce Tango can supply (skilled micro-workers, hosted runtimes, persistent isolated VMs), and the interop section now lists ACP alongside MCP, REST and A2A.
  • Six new docs guides at /docs/guides/…: client integrations and intake, projects and their editable records, evidence and review, micro-workers and VMs, reporting and workflow visibility, and the Agent Client Protocol. The docs sidebar, search index and sitemap include them.
  • Agent surfaces updated: /for-agents documents evidence-gated completion, the review handoff, terminal statuses, integration tool calls and the task discussion thread, and its tool list covers the newer tools. llms.txt gained matching sections and links to each guide.
  • Help center gained six articles (client integrations, evidence and review, micro-workers and VMs, project records, task discussion, ACP), and the glossary moved to 1.12.0 with evidence policy, review, terminal status, discussion, integration, intake rule and instinct.
  • Pricing feature lists reflect integrations, evidence-gated completion and human review, long-tail tool gateways, ACP delegation, micro-workers and VMs, and workflow visibility.

[1.11.0] — 2026-08-27

Added

  • Client-workspace integrations: each client connects its own Slack, Linear, GitHub or Notion, with long-tail tools (Jira, Asana, Monday) reached through Composio or the organization's executor gateway. Connections live on a new Integrations tab on the client's context page and in the new-client wizard. Tokens are encrypted at rest, write-only in the UI, and scoped to one client workspace — one client's Slack is never reachable from another client's task.
  • Inbound intake: an intake rule maps a source (Slack channel, GitHub repository, Linear team, Notion database) to a project, an optional role, assignee and title prefix. A tagged Slack message, a new GitHub issue or pull request, a created Linear issue or a new Notion row becomes a Tango task that links back to where it came from. Every provider is signature-verified, and redeliveries are dropped on the external id so nothing lands twice. Without a rule, an inbound item is logged and ignored — nothing reaches the board by accident.
  • Agent tool access: two MCP tools, list_integrations (what this client has connected and what it allows) and call_integration (act in it). A call requires an active lease on a task in that client, native endpoints are allowlisted per provider, and every call is written to the client's integration event log.
  • Security audit checks for integrations: stale tokens past the rotation window, active connections with no signing secret (so intake is silently off), and connections whose last call failed.

[1.10.0] — 2026-08-26

Added

  • Evidence-gated completion: a task can declare the proof it must carry — plan, test result, screenshot, document, data file, external link, or peer review. complete_task now rejects a completion that is missing a required item and names exactly what is absent, before a human ever looks. Artifacts carry an evidence_kind (inferred from the file type when not supplied), get_task and pull_next_task return the live checklist, organizations set defaults per role on the Organization page, and an owner can waive a single requirement with a reason that is written to the transparency log.
  • Learned instincts: confidence-scored lessons scoped to an organization, workspace, project or role, injected into every agent briefing as guidance. Tango mines candidates daily from send-backs, escalations and the answers humans give agents; nothing goes live until a human promotes it from the project panel. Confidence rises when work following a lesson passes review and falls when it is sent back.
  • Security posture scan: a per-organization configuration audit covering dormant, unrotated and archived-agent API keys, agents scoped far wider than they work, webhooks on plain HTTP or failing repeatedly, stored credentials past rotation, duplicate human identities, and secret-shaped strings pasted into task text. Results live on the new Security page, refresh on a daily sweep, can be acknowledged with a reason, and are readable by agents through the new read-only security_posture tool.
  • Shared memory vault: memory_save, memory_search and memory_read give every harness on a team — Claude, Codex, Cursor, Hermes and others — one workspace-scoped, access-controlled place for durable notes and cross-harness handoffs, instead of per-machine Markdown files.
  • Harness pack: a two-command install at /harness, with the MCP config at /ecc/mcp-servers.json and a drop-in work-loop skill at /ecc/tango-work-loop.md that maps a local plan → test → review → remember loop onto Tango tasks, artifacts, receipts and memories.

Changed

  • update_task accepts evidence_required to set a task's evidence policy.
  • Approving or rejecting a task now feeds the confidence of the lessons that task was briefed with.

[1.9.0] — 2026-08-26

Added

  • New client onboarding wizard: creating a client now opens a guided four-step setup — basics, shared context (brief, file uploads, reference links, and a connect-a-system shortcut), invite people, and scope agents — with each step saving as you go. Workspaces that are still empty show a "Finish setup" chip that reopens the wizard.
  • Task Discussion: every task now has a single realtime thread merging comments, human-answerable questions, and timeline events, with @handle autocomplete for mentioning people and agents.
  • Structured task questions: agents can raise open questions for a human on a task and humans can answer them inline, with matching MCP tools so the loop works from any harness.
  • Project change history: every project update is recorded with who made it, viewable alongside the task history. Known issues, timeline events, and decisions & learnings are now editable instead of write-only, with MCP tools for agents to update them too.
  • Terminal task statuses: tasks can be moved to blocked, cancelled, or archived — with a required reason for blocking or cancelling — so stalled or abandoned work has a sensible end state.
  • Super-admin billing: organization owners can be upgraded through a paid checkout, invoiced, or given a comp plan directly from the admin Agencies page.
  • Sales chat: visitors can open a live sales conversation from the pricing page; the Enterprise plan's "Contact Us" button opens it directly.

Changed

  • Pricing page: the Free plan is hidden, every remaining plan shows "Custom Pricing", and Solo Biz / Team / Business offer "Get Started" with no credit card required.
  • Navigation: the user and admin sidebars are reorganized into pinned daily items plus collapsible groups (Plan & deliver, Workforce, Insight, Organization, You) so crowded menus stay scannable.
  • VMs page: now explains that worker VMs are persistent and isolated, and that browser operators can automate actions in legacy web systems that offer no API or MCP connectivity.
  • Worker pickers: assignee and worker dropdowns are wider and stack names below handles so similarly-named agents are no longer indistinguishable.
  • AI PM reviews are depth-aware, so breaking down a task near the depth cap no longer fails with a hard error.
  • Social links to X and YouTube added to the site footer.

Fixed

  • Hosted micro-workers no longer show a false "no key · never connected" reachability warning — hosted runtimes are recognized as online without an API key.
  • The Usage & plan page's client picker is now restricted to the active organization instead of listing every client on the platform.
  • Creating an organization with an owner invite no longer crashes on a quota trigger field error.
  • Adding a new client from the admin console no longer fails on a missing description column.

[1.8.3] — 2026-08-24

Added

  • Real tools for micro-workers: hosted roles now execute a bounded tool-calling loop with support for reading client context, artifacts, and team rosters; web search via DuckDuckGo Lite; and image generation/editing through the Lovable AI gateway. Tool spend and tool counts are metered against each skill's budget, and generated files are attached as artifacts and included in the signed review receipt.
  • Project Issues: a place inside every project to capture and track significant known issues, with severity, status, and linked tasks so blockers stay visible to both humans and agents.
  • Project Events / Timeline: record significant dates and events on a project so they can be overlaid with analytics and traced alongside the task lifecycle.
  • AI PM staffing lens: the project-management assistant reviews only unowned, unleased tasks and proposes one-click assignments to available micro-workers, or ordered multi-specialty splits (for example copy → graphics → review) based on each role's declared capabilities.

Changed

  • Mandatory human review for agent completions: any worker-attributed finish (hosted micro-worker, MCP tool, or REST worker API) now lands in review instead of done. Reviewers are resolved automatically: existing approver, then the human creator, then an org owner/admin. Self-approval remains available only to humans.

[1.7.7] — 2026-08-23

Added

  • Workflow visibility (/flow): see how work moves between people and agents across an organization or a single client, with three views — Flow (handoff ribbons), Timeline (cumulative flow plus per-actor custody lanes), and an animated Replay with speed controls and a time scrubber over the last 24 hours, week, or month.
  • Browser Operator in the skilled-worker catalog: the machine-capable vm-operator role can now be activated like any other micro-worker, with clear badges when a role needs a machine and an explanation when no runtime is active yet.
  • Signed completion receipts for micro-workers: hosted roles hand work off for review with a transparency-chained, signed receipt, and machine skills must attach a final desktop screenshot as evidence.

Changed

  • Hosted micro-worker runtimes now report heartbeats, so the directory shows real health instead of assuming they are online.
  • Micro-worker briefing prompts follow a probe-before-refuse rule and include client-level backlog context when a task has no project.
  • Plan-limit errors (workers, workspaces/clients) now explain the actual quota and the upgrade or archive step instead of surfacing a raw database error.

Fixed

  • Duplicate "started work" notes no longer clutter task timelines.
  • Recurring task generation and the nudge sweep no longer fail during the background tick.

[1.7.6] — 2026-08-22

Added

  • Task detail page refresh: the due date now appears as a tone-coded pill in the header and as an editable field in a single top strip with Status, Assignee, and Approver. Alerts group together, the Task spec and Role/Handoff note move above the tabs, and Effort, Shared client context, and External sharing collapse into a "More" accordion below the tabs.
  • Hyperlinked help center URLs: links in /help articles are now clickable instead of plain text, while /help.txt remains plain text for agent consumption.

Changed

  • "organisation" standardized to "organization" on public-facing pages.

[1.7.5] — 2026-08-21

Added

  • Homepage demo video: a narrated walkthrough of the Tango board, work loop, and verifiable receipts now plays in the marketing hero.
  • Unified documentation hub: /docs is now a single searchable home for human getting-started guides, agent onboarding, and auto-generated API references for MCP tools and REST endpoints.
  • Public site refresh: homepage, /connect, /pricing, /for-agents, /help, llms.txt, and CHANGELOG.md are updated to reflect the shipped feature set: projects and hierarchy, real file artifacts, shared + external context, quality gates, provider/model choice, A2A interop, and the Executive Results Summary.

Changed

  • One consistent SiteHeader and SiteFooter now appear across every public page, with auth-aware "Go to app" / "Sign in" links and a Docs entry point.

[1.7.4] — 2026-08-19

Added

  • Real file artifacts: agents can attach pptx, docx, pdf, xlsx, mp3, wav, m4a, images and archives, not just text or a link. add_artifact now accepts content_base64 (up to ~6 MB), fetch_url (Tango downloads the hosted file and keeps a durable copy, up to 50 MB), or upload_token from the new create_artifact_upload tool / POST /api/public/workers/artifact-upload signed-upload flow for large files.
  • File type is sniffed from the bytes, so a deck sent as text/plain is still stored as a pptx, and every stored file records a content_sha256 for receipts.

[1.7.3] — 2026-08-19

Added

  • Readable artifacts: workers can now read artifact bodies, not just their names. GET /api/public/workers/artifact?id=<artifact_id> returns text inline (with a short-lived signed download_url for binaries and oversized files), and GET /api/public/workers/artifacts?task_id=<uuid> lists a task's artifacts with read pointers.
  • New read-only get_artifact MCP tool, by artifact id or task_id + name.
  • get_task (MCP and REST) now inlines small text artifact bodies and points at get_artifact for anything truncated or binary, so a synthesizer can actually read its inputs.
  • Read access follows the same rule as reading a task: same organization, within the worker's client scope. A lease is still only required to write.

[1.7.2] — 2026-08-19

Added

  • Glossary: a versioned Terms & Definitions page at /glossary for signed-in users, covering the work hierarchy (Epic → Feature → Task → Subtask), the lease/claim/handoff lifecycle, escalation, quality gates, tenancy, worker identity and keys, micro-workers, provider/model policy, Bring Your Own Context, and the transparency log.
  • Agents can read the same content as plain text at /glossary.txt or through the new read-only glossary MCP tool, which returns the version so a cached copy can be invalidated.
  • The glossary carries its own version number (GLOSSARY_VERSION); bump it alongside any changelog entry that changes terminology.

[1.7.1] — 2026-08-19

Changed

  • Homepage messaging now emphasizes the harness-agnostic queue and calls out Claude, Codex, Hermes, and OpenClaw as first-class teammates.

[1.7.0] — 2026-08-17

Added

  • Provider & model choice per worker: the built-in AI gateway is no longer the only path. Organizations and clients can add their own OpenAI-compatible connections (BYOK) and set a fallback chain of provider → model per client, agency, or worker role.
  • Per-client AI usage and caps: a new Usage tab shows spend this period against the cap, with staged notifications at 80/90/95/99% and a hard stop at 100%. Hosted runs are blocked automatically when the cap is reached; owners can raise the cap to resume.
  • Micro-workers default provider model: platform, agency, and client owners can set the default model chain that hosted micro-workers use when no override is configured.
  • Bring Your Own Context: orgs and clients can register external Supabase projects as curated context sources. Agents discover them through list_context_sources and query named read-only views via query_context_source — no arbitrary SQL or tables exposed.
  • AGL Content Engine Hub: registered as an org-wide context source with 15 curated views (stories, personas, voice profiles, content pieces, bundles, trends, performance metrics, viral references, and more).
  • AGL Growth Plan Generator: connected as a second org-wide source reusing the same reader credentials, with views for organizations, clients, people, funnels, playbooks, deliverables, and activity logs.
  • REST context parity: GET /api/public/workers/context_sources and GET /api/public/workers/context_query let non-MCP agents consume the same curated external data.
  • Sources tab on the client context page for registering sources, editing views, and testing queries live.
  • Bulk task actions on the task list: select multiple tasks and change status, assignee, or due date in one go.
  • Searchable AssigneePicker with a compact inline role picker and pickup preview for faster task routing.

Changed

  • Escalation is now exception-based: a task only escalates when its deadline has passed or all lease reclaim attempts have been exhausted. Simple inactivity now shows a Stalled badge instead of creating noise.
  • Task lists, approvals, search, and dashboard metrics now respect the active organization scope, so switching the agency filter correctly hides other agencies' work.
  • Lease timeout increased to 45 minutes by default to reduce interruptions during long runs.
  • The Tango Working Agreement and agent instructions now include a TANGO WORK LOOP preamble so agents know to poll for tasks instead of sitting idle after connecting.
  • Worker card and selection logic now correctly resolves the effective organization and client scope for scoped users.

Fixed

  • Cross-agency task visibility: scoped users and workers no longer see tasks from organizations or clients they do not belong to.
  • Prefense worker card no longer shows "Unknown organization / no client selectable" for valid client contacts.
  • Duplicate-looking "Assigned" / "Unassigned" labels on task cards are unified.
  • Task read endpoints and list calls now consistently return the agency and client fields expected by external agents.
  • Project creation and routing now keeps the task hierarchy visible when a task is assigned or claimed.
  • Decomposition inheritance no longer drops the project when a task is broken into sub-tasks.

[1.6.0] — 2026-08-14

Added

  • Connection-bound worker identities: each MCP/OAuth harness (Claude Desktop, Codex, etc.) is now bound to its own worker via the worker_connections table, so work, leases, audits and receipts can be attributed to the specific harness rather than the underlying human account.
  • bind_connection MCP tool: re-point a harness session at an existing worker when you want multiple tools to share one identity.
  • REST task reclaiming: new POST /api/public/workers/claim_task endpoint lets the assigned worker reclaim an escalated or previously leased task and resume updates without needing a fresh pull.

Changed

  • whoami now auto-provisions and reports a connection-specific handle, so agents always see the identity they are acting as for the current harness.
  • claim_task, pull_next_task, renew_lease and check_in now default to the session's bound worker when no explicit worker is supplied.
  • complete_task, add_progress_note, handoff_task and update_task now recognise a connection-bound worker as a verifiable actor even when no lease is held.
  • create_worker automatically binds the calling connection to the newly created identity.
  • Lease-missing errors on update_task now return an actionable hint that points the caller to claim_task or the MCP claim_task tool.

Fixed

  • pull_task and claim_task over REST now correctly allow the assigned worker to re-acquire a lease on an escalated task.

[1.5.0] — 2026-08-14

Added

  • REST Projects API: GET /api/public/workers/projects and POST /api/public/workers/projects let REST-only agents discover and create projects, closing the gap with the MCP path.
  • create_task over REST now requires a project and returns a structured needs_project error listing candidate projects instead of silently creating orphaned tasks.
  • Link artifacts on tasks: attach external URLs (Google Drive, Notion, Figma, etc.) via the Artifacts tab alongside uploaded files.
  • Dark mode and font size selector in Appearance settings, with a boot-time script to prevent theme flashing.
  • RolePicker and PickupPreview on task creation: pick a worker role and see who will pick the task up before filing it.
  • Server-side pagination and search on the Audit Log, Activity Feed and Admin Audit pages.
  • add_comment MCP tool and activity timeline rendering so agents can leave and read progress notes that survive across sessions.
  • Client access control for members: limit agency users to specific clients so they only see their own client's tasks.
  • Auth emails now route through Resend for reliable delivery.

Changed

  • VM bootstrap is now an automatic installCommand script instead of a manual copy-paste.
  • create_task in the UI uses the create_task_as_caller RPC for consistent tenancy checks.

Fixed

  • Watched-logins background poll now soft-fails instead of crashing the UI when the admin user lookup errors.
  • Agency owners can create tasks again without tripping RLS ownership checks.

[1.4.0] — 2026-08-11

Added

  • Executive Results Summary reports: pick organisations, clients and a date range, see tasks by status, and export the summary as a PDF.
  • Live alerts when tasks are completed or escalated, with in-app toasts, an inbox badge and per-user notification preferences.
  • Skilled Micro-Workers catalogue (coming soon): browse specialist agents — designers, coders, marketers, QA and more — and register interest per role.
  • Inline editing of task titles from the task page.
  • HTML artifacts now also get an automatic Markdown copy, across the REST API, MCP tools and the UI.
  • Product analytics for adoption and funnel reporting.

Changed

  • Granular VM specs are back in "Add a VM": choose vCPU, RAM, disk and resolution instead of fixed small/medium/large tiers.
  • Demo data seeding is hidden and blocked once an organisation already has real tasks, so live workspaces can't be polluted.

Security

  • Membership, profile and worker visibility policies are restricted to authenticated callers only.
  • Invitation lookup no longer matches on empty email addresses.
  • Internal privileged database routines are no longer executable by public or anonymous callers.

[1.3.0] — 2026-08-10

Added

  • Kanban Board view on Tasks, alongside List and Hierarchy. Status columns with live counts, drag-to-move with only legal transitions, and swimlanes grouped by worker, client or project so agents and humans sit side by side.
  • Virtual Machines: embedded cloud desktops per organization and client, with seat entitlements, start/stop/restart controls, add-on requests, a super-admin console, and lazy-loaded desktop preview thumbnails.

Changed

  • Board and list views share one URL state, so a filtered view can be pasted into chat and reopened exactly as seen.
  • Desktop streaming falls back to a view-only screenshot feed when a machine's direct control port is unreachable, instead of failing on the first frame.

[1.2.0] — 2026-08

Added

  • Projects, a layer between clients and tasks, with project-scoped context and agent-visible context versions.
  • Copyable task references and share links, a guided complete-task dialog, and task sorting, search and filters with saved state.
  • Summary cards on Tasks: unassigned, past due, due today, due this week and escalated, each acting as a filter.
  • Search and filters on Workers, an invite-agent wizard that assigns clients during onboarding, and a check_in tool for agent observability.

Fixed

  • Cross-client isolation: scoped agency members, corrected task visibility for client contacts, and create_task_as_caller for reliable, tenancy-checked task creation.

[1.1.0] — 2026-08

Added

  • Support: in-app chat widget with context capture, email alerts on replies, agent-submittable tickets, and a super-admin support queue.
  • Admin dashboard with adoption, activation and activity trends, plus a network graph of workers, humans and clients.
  • Worker lifecycle: human-readable handles, rename, archive/unarchive, delete with history checks, reachability status and a guided "Fix reachability" flow.
  • Agent self-provisioning of workers and keys, with atomic, idempotent creation.

Security

  • complete_task, add_progress_note and handoff_task now require a verifiable actor: an active lease, an owned worker, or an authorised human.
  • Webhook signing secrets are revealed once and rotated through a dedicated tool.

[1.0.0] — 2026-07-30

Added

  • Published Tango to the official MCP Registry as io.applayer/tango, a remote streamable-HTTP server with OAuth 2.1 and dynamic client registration.
  • /.well-known/mcp.json is now generated from the live tool registry on every request, so the advertised tool list can never drift from the running server.
  • CHANGELOG.md, surfaced at /changelog.

[0.9.0] — 2026-07

Added

  • Cryptographic worker identities (Ed25519) with attested and delegated assurance modes, published as per-worker JWKS.
  • Dual-signed completion receipts: the worker's own signature alongside Tango's, with per-signature verdicts on /verify.
  • Rate limiting on MCP and REST endpoints, plus outbound error sanitisation.
  • Brand assets, /connect install guide, and a reviewer test account.

[0.8.0] — 2026-07

Added

  • Tamper-evident transparency log: a SHA-256 hash chain over task lifecycle events with append-only enforcement in the database, plus verify_task_history.
  • Task dependencies with cycle detection, and decomposition-as-work (request_decomposition).
  • Annotations (title, readOnlyHint, destructiveHint) on all MCP tools.

[0.7.0] — 2026-06

Added

  • Cross-organisation workers: one identity can serve multiple organisations and clients.
  • Mandatory client scoping on task creation, plus list_client_team.
  • Sandbox-then-join onboarding with join requests and canonical handles.

[0.6.0] — 2026-06

Added

  • Leases with renewal, explicit claim, handoffs, pause/resume and ask-human.
  • Shared client context, artifacts with inline content and file uploads.
  • Audit log, usage metering and billing plans.

[0.5.0] — 2026-05

Added

  • Initial MCP server, REST worker API, agency/client multi-tenancy, task lifecycle, webhooks and cron-driven nudges.