Every version, and what it changed for you.

Your index is encrypted by default, and the answers your agent gets are both smaller and more honest: a turn now costs about six hundred fewer tokens before anybody has asked anything, and the number Archis shows for how sure it is no longer claims more than it knows.

Before you upgrade — Update. Your existing indexes keep working and are not rewritten; the next full index of a repository is sealed. If you run Archis in a container or a pipeline, a machine token can now be redeemed on a machine that has never signed in.

• NewIndexes are encrypted on disk by default. The key that opens yours is generated on your machine and never leaves it — what we hold protects nothing on its own. Nothing you already have is rewritten, and you do not have to do anything: a repository is sealed the next time it is indexed in full.
• NewA machine token now works on a machine that has never signed in — a container, a CI runner, a Codespace — instead of only alongside a sign-in that had already happened. The machine it runs on counts as one device however many times it restarts, so a fleet of replicas no longer eats an activation each.
• ImprovedEvery turn with an agent starts about six hundred tokens lighter. The instructions and tool descriptions Archis sends on every single turn said several things twice, described the same argument four different ways, and pointed at one tool that had been renamed and another that does not exist. That is paid for on every message of every session, so it is the cheapest thing in the product to make smaller.
• ImprovedAn answer no longer repeats what you just sent it, and asks for roughly a fifth fewer tokens for the same question. It used to hand your own question back, name the session you are already in, and repeat the same sentence about how to ask for more once per file.
• Improvedchi init stops charging the same ceremony in every repository: on one that is already indexed it takes about a third of a second instead of sixteen, and a routine run prints one line instead of twenty-six. A first run is six lines, not two hundred and fifty.
• ImprovedIndexing survives files it used to choke on. A very large generated file is skipped instead of being parsed whole, and a deeply nested one is skipped instead of stopping the run. One repository carrying a single 5.4 MB bundle went from seventy-five seconds to under one.
• FixedThe confidence Archis reports alongside an answer was being computed on a scale it no longer used, so it could read as total certainty about a ranking that was nearly flat. It is now computed correctly. It tells you how far the best candidate stands above the next one — which is not the same as how likely it is to be right, and the page that documents it now says so rather than implying otherwise.
• FixedArchis could tell your agent it had already been given something it no longer had. When a coding assistant compacts a long conversation, everything Archis had sent leaves the transcript — and Archis went on answering "you already have this" instead of sending it again. It is now told when that happens, and where a tool cannot tell it, the assistant can ask for a second copy.
• FixedReading a file through the shell no longer arrives with its middle removed. cat -n file was treated as an ordinary noisy command rather than as a read, so it was shortened like one. A read is served byte-exact and is only ever cut at the end.
• FixedA failing build no longer loses the line that explains it. docker build kept "exit code 2" and dropped the compiler message underneath it; a long terraform plan lost its summary and its errors to a cut taken from the wrong end. Commands the way people actually write them — cd somewhere && …, sudo …, with environment variables in front — are recognised now too, and shrink instead of arriving raw.
• FixedA damaged index says so and can be rebuilt. It used to report itself current, and the one command documented to repair it could not: it opened the damaged index before rebuilding anything, so it failed the same way every time. chi doctor now reports the damage and names the fix, and the fix works.
• FixedA captive portal or a corporate proxy can no longer sign you out. A refusal that did not come from us was read as one that did, and the credential on the machine was deleted. Signing in from a machine you revoked works again as well, without spending another activation, which is what the portal had been telling you all along.