Release 9.3.0 concentrates on three feature areas: a new agentic trust policy layer, selective API definition generation, and an updated risk rules catalog.

Agentic trust for AI agent traffic

The Cequence Platform now includes agentic trust, a new policy definition point for traffic from AI agents.

• A new issuer registry lets you register identity issuers, including Skyfire and biometric or Descope-based issuers.
• Agent access policies control which registered agents can reach your APIs and under what conditions.
• A new detected agents view lists every agent seen in your traffic, with a per-request activity log you can filter and drill into.
• Role-based access control governs who can manage issuers and access policies, and every change is recorded in an audit trail.

Selective API definition generation

When you generate an API definition, you can now choose which hosts, base paths, and individual endpoints to include, instead of generating a definition for an entire host at once.

• Select one or more hosts, one or more base paths for each host, and specific endpoints under each base path.
• Endpoints you leave unselected under a base path are treated as shadow, and endpoints outside any selected base path are treated as undocumented.
• Generated OpenAPI documents now emit request and response header parameters.
• Generated OpenAPI documents no longer contain duplicate schema definitions.

Risk rules catalog update

The risk rules catalog moves to version 24 in this release. The update adds eight new system rules, which ship disabled by default so you can opt in on your own schedule, and removes rules that are deprecated.

New in release 9.3.2

The following features are new in this release.

Added a connector that creates tickets in self-hosted Jira Data Center 8.22 or later. The connector selection page now labels the tiles Jira Cloud and Jira Data Center. The connector authenticates with a Client ID and Client Secret from an Application Link in Jira administration, and requires HTTPS. Jira Server is not supported.

Added a Threat Activity column to Agents Overview, which displays the threats that the agents API returns, with a +N overflow count and the remaining threats on hover. Added an Agent Name filter to the Detection Dashboard. Added a shield action next to the View Transactions action, which opens the Detection Dashboard grouped by Threat Classification, filtered to the selected agent, and set to the current Agents Overview time range.

Improvements

The following improvement is included in this release.

Improved the distribution of Bot Analyzer aggregation records across Kafka partitions. Records that have no pivot value or an empty pivot value now use salted keys, which reduces the uneven consumer lag that data skew caused.

Breaking changes

Review the following change before you upgrade to release 9.3.0.

Behavior change: shadow endpoint parameterization. The Parameterize shadow endpoints toggle in inventory settings is removed. Starting with this release, the Cequence Platform always parameterizes shadow endpoints. When your environment previously had this setting turned off, shadow endpoints in your inventory are parameterized automatically after you upgrade. There is no setting to turn this behavior off.