Planned Capabilities

Not included in the current release

This section preserves product direction only. It contains no setup instructions, operating promises, or delivery dates.

The implemented release is the console and governed model/MCP gateway control plane described in Current release. The following product areas remain outside its operating contract:

Capability	Current status
Native Agent Studio and runtime	Agent content, immutable snapshots and versions, private Preview, Production deployments with preflight, smoke test, an optional publish gate and rollback, Chat, the managed runtime, and experiments on snapshots and published versions exist; general workflow composition, arbitrary external-framework hosting and a general native runtime do not.
Automations	No durable Workflow definition, worker, state, retry, or task experience.
AI Applications	Builder, private Preview, Production deployments, member Chat and the public deployment AG-UI API exist; an external backend calls POST /v1/deployments/{deploymentId}:invoke with an ordinary service virtual key allowed deployment.invoke and names its end user with customer:{subject} (Connect an external UI). General application composition, automatic customer-product hosting and dedicated application analytics do not.
Retrieval	Governed embedding and reranking inference exist; no Collection, source, indexing, retrieval query, citation, or deletion workflow.
Policy-driven approvals	Rules on tool arguments and results, durable approvals for Action tools with re-evaluated single execution (Approvals) and managed conversation consent exist; policy-evaluated approval routing, delayed work, and approvals of model calls or Agent runs do not.
Evaluation and advanced operations	Operational Overview, Requests, Traces, Sessions, Usage, supported filters, authorized span detail and score definitions, scores, versioned evaluation datasets with curation from Traces, Sessions and Requests, and experiments on Agent snapshots and published versions with LLM judge evaluators, auto-evaluation of production Traces, review queues and judge calibration, publish gates, the evaluation management API and JSON portability are implemented; live tailing, attachments, alerts, incidents, comments, public observation APIs, OTLP metrics/logs/profiles and estate views are not.
Evidence and assurance	Trace-scoped governed/observed reconstruction exists; controlled export, corrections, retention workflows, legal holds, and Outcomes do not.
Short-lived Mission Control workload identity	OIDC/SCIM enterprise sign-in, provisioning and group mapping are implemented (Enterprise identity); expiring user and service-account virtual keys remain current. Short-lived externally issued Mission Control workload credentials are not implemented. Cloud-provider SDK credentials are a separate gateway-to-provider connection.
Verified workload attestation	Runtime version data remains observed telemetry; verified artifact provenance and workload attestation are not implemented.
External secret managers	The gateway resolves env/NAME references; secret-manager adapters are not present.
Advanced budgets and quotas	Organization, Team, member, service-account, key and customer allocation and operating caps are current (Budgets): spend over daily, monthly or lifetime windows, requests and tokens per minute, and concurrency. Soft alerts, custom windows, temporary increases, per-model/tag limits, resource/Run/outcome attribution, budget-aware fallback, invoice reconciliation, and strict distributed no-overrun reservation remain planned.
Packaged cloud deployment	Source deployment and signed container images are current (Container images); AWS/Azure/GCP/Kubernetes/SaaS packaging (a Helm chart and infrastructure modules) is not present.

When one of these capabilities is implemented, its feature change must update the current-release status, replace the corresponding status page with task documentation, update MkDocs navigation, and extend verification in the same change.