Add September 11 changelog entry - #563
Conversation
|
Preview deployment for your docs. Learn more about Mintlify Previews.
💡 Tip: Enable Automations to automatically generate PRs for you. |
![cursor[bot]](https://avatars.githubusercontent.com/in/1210556?s=60&v=4){kind=small}
There was a problem hiding this comment.
Risk assessment: Very Low
Decision: Approve
This PR adds one <Update> block to changelog.mdx (18 insertions, 0 deletions). The new September 11 entry follows the same Mintlify <Update> pattern as existing weekly entries. The follow-up commit is a wording tweak in that same bullet.
Why this is Very Low:
- Single documentation file; no application, API, auth, billing, or infrastructure changes
- No
docs.json, workflow, or config changes - No CODEOWNERS file in this repo, so code-owner review is not required
- Blast radius is limited to changelog copy on the docs site
No existing approval was present, so this review approves the PR.
Sent by Cursor Automation: Assign PR reviewers
There was a problem hiding this comment.
Risk assessment: Very Low
Decision: No new approval (already approved on this commit)
Re-evaluated the current HEAD (99744f0). The diff is unchanged: one <Update> block added to changelog.mdx (18 insertions, 0 deletions). That is documentation-only changelog copy using the existing Mintlify pattern.
Why this is Very Low:
- Single docs file; no application, API, auth, billing, or infrastructure changes
- No
docs.json, workflow, or config changes - No CODEOWNERS file, so code-owner review is not required
- Blast radius is limited to changelog copy on the docs site
Risk did not increase. The prior approval on this commit remains in effect.
Sent by Cursor Automation: Assign PR reviewers
There was a problem hiding this comment.
Cursor Bugbot has reviewed your changes using default effort and found 1 potential issue.
❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.
Want higher recall? High effort reviews run extra passes and find more bugs. A team admin can switch effort levels in the Cursor dashboard.
Reviewed by Cursor Bugbot for commit 99744f0. Configure here.
| ## Product updates | ||
|
|
||
| - Launched **payments for browser agents**: agents can now complete purchases without exposing card data to your application, agent, or browser. [Vaults](/vaults) are a new primitive that grants a browser session permission to use a payment method without revealing the underlying credential. The agent fills the checkout form with aliases, and Kernel substitutes or authorizes the real credential at browser egress. Card numbers and CVCs stay out of the agent's context, your logs, and session recordings, which helps you avoid expanding your PCI DSS scope. Two native wallet integrations ship with it: [Link by Stripe](/integrations/payments/stripe-link) for single-use credential substitution, and [AgentCard](/integrations/payments/agentcard) for authorized request handoff. The merchant keeps its existing checkout and does not integrate with Kernel. | ||
| - Added `kernel vaults` commands to the [CLI](https://github.com/kernel/cli) for creating vaults, connecting wallets, requesting cards, and observing item state and events, plus `kernel browsers create --vault` to attach a vault to a session. The [MCP server](/reference/mcp-server) exposes the same vault payment operations as tools, gated on organization entitlements with curated errors and scoped operation hints. |
There was a problem hiding this comment.
CLI changelog missing version ranges
Medium Severity
The kernel vaults and kernel browsers webmcp CLI bullets omit a version range. Recent changelog CLI items include one, and this window shipped v0.34.0 and v0.35.0.
Additional Locations (1)
Triggered by learned rule: Changelog entries must match shipped, customer-visible work
Reviewed by Cursor Bugbot for commit 99744f0. Configure here.
2 participants
Summary
Adds the September 11 changelog entry covering agentic payments and Vaults, the vault and WebMCP CLI commands, vault tools in the MCP server, iframe/worker session telemetry, dashboard telemetry defaults, and the Live View input fixes, plus this week's documentation updates.
Payments copy mirrors the public launch positioning: aliases in the checkout form, credential substitution or authorization at browser egress, no card data in the application, agent, or browser, and the two wallet integrations.
Verification
Every item was checked against what is actually released:
81d83be, ECS rollout completed 2026-09-10.kernel vaults(v0.34.0) andkernel browsers webmcp(v0.35.0), both published and on the brew formula.ce0717a.kernel-cu-v66/chromium-headless-v62, pointed at prod on 2026-09-10.Two items from an earlier draft were dropped: a telemetry data retention bullet, which shipped in August and was already announced in the August 21 entry, and the CLI press-key format doc change, which is merged but not in a released CLI version.
Note
Low Risk
Documentation-only changelog addition with no runtime or API behavior changes in this PR.
Overview
Adds a September 11 changelog block at the top of
changelog.mdx, ahead of the September 4 entry.Product updates announce agent payments and Vaults, new
kernel vaults/kernel browsers create --vaultandkernel browsers webmcpCLI commands, vault tools on the MCP server, richer session telemetry (iframes/workers), dashboard sessions defaulting to telemetry on, and Live View input fixes (clipboard, focus, key shorthand,400on bad key sequences).Documentation updates call out new Vault/payments docs and pricing, a Cookbooks tab with 13 recipes, regional browsers on pricing, and the network access allowlist reference.
Reviewed by Cursor Bugbot for commit 99744f0. Bugbot is set up for automated code reviews on this repo. Configure here.