Changelog: Security
Everything that shipped in Security, when it shipped.
November 2026
Retention by conversation type, approved networks and security alerts, and a calm screen when Kemble needs a moment
Admins of a Kemble Work workspace can keep each kind of conversation for its own time, with a month’s notice before anything goes sooner, choose how files work in each channel, export one person’s messages or chosen conversations, allow access only from approved networks and see security alerts. When Kemble needs a moment for maintenance you see a calm screen and stay signed in, and whenever Kemble steps in your workspace says so.Security
October 2026
A decision layer that only ever adds, and a website for every thumb
Kemble now has a decision layer, Baseten’s mammoth decision model, which answers typed questions with probabilities and never with text. It puts urgent reports first, reads Circle’s new Intent review rules, files scam message requests under Spam, warns on look-alike sign-in pages, adds a Decide step to workflows and sorts the contact form, and it never deletes, blocks or bans anything.SecurityFairer deals, and Circle’s call bar as the owner drew it
Games now shuffle, deal and roll from ChaCha20 with a 256-bit key for each game. Circle’s voice rooms and stages get Invite, Pop out and Full screen at the call bar’s edges, a header with just the chat and one More, a captions language you can choose before turning them on, and an icon-only call bar on phones.SecuritySafety and plans: making a private channel public, refunds that end a plan, and Aura’s upload size
Only workspace admins can make a private channel public; a refund or chargeback ends the plan it paid for; Aura’s larger upload size applies everywhere.SecurityDeleted channels take their files, routines stay where their readers are, and links pause with a pending deletion
A deleted channel’s files go with it; a K Buddy routine never summarises a private place into a wider one; your public links pause while your account deletion waits.SecurityQuieter lock screens, a confirmed download of everything, and automated replies kept to members
With previews off, a notification’s title leaves out what it is about; an export of everything asks you to confirm before it downloads.SecurityChanging single sign-on, SCIM or full exports asks you to confirm it’s you
An owner confirms with a two-step code, a password or a recent sign-in before changing how everyone signs in or exporting private conversations.SecurityHostile PDFs are read in a contained process, and guests hear only about their own channels’ people
A PDF built to exhaust memory is stopped quickly; a guest limited to some channels no longer sees everyone’s presence; Circle never shares when strangers were last seen.SecurityLink previews and document reading hold up against hostile files, and stricter SCIM checks
A crafted web page or Office file can no longer stall previews or summaries; a phone set to Nothing is not told a Link started; SCIM refuses malformed requests plainly.SecurityReminders respect closed channels, QR sign-in names devices safely, and steadier recordings
A reminder about a channel you can no longer open keeps its words to itself; QR sign-in never repeats a made-up device name; parts of a recording are bounded and kept in order.SecurityGated channels stay off the lock screen, sign-in takes the same time for everyone, and cleaner pages
Reminders, list items and canvas comments in an age-gated or spoiler channel say where, not what; a wrong password costs the same for every account.SecurityApps you authorised end with your sessions, sign-in links leave the address bar, and SCIM errors in SCIM’s shape
A password reset or change, Sign out everywhere, an address change and staff action end every app’s access; a mailed link’s token leaves the address bar at once; SCIM answers errors as identity providers expect.SecurityDirectory sync at its real address, a request log without secrets, and console saves that say so
SCIM provisioning answers at /api/scim/v2; the request log no longer keeps tokens; more names follow the name rule; console saves announce “Saved.”Security
August 2026
Single sign-on over OpenID Connect, and SCIM
People sign in at your identity provider, and your directory adds and removes them.SecurityRetention and legal hold
Messages deleted on the schedule an organization sets, and a hold that stops the deleting.SecurityTenants can read their own audit log
Around twenty-five write sites, and until now no way to read any of them back.Security