Changelog

The full vault smoke-test battery ran green from /admin/vault-verify:

• connectivity — 19ms (bw-serve reachable, vault unlocked)
• round-trip — 1,783ms (canary credential written, read back, fields intact)
• envelope:shape — 32ms (42-byte plaintext encrypted to 103-byte ciphertext; underlying provider sees only opaque cipher)
• cleanup — 45ms (2 test credentials removed)

PASS=4 WARN=0 FAIL=0. Phase 1b vault gate cleared. Any feature flag that depends on the vault is safe to flip.

The hard-cap *service* has been live since the §10 0j infrastructure step (default ON, blocks at 100% MTD spend). What was missing was the UI to configure it. The new /billing panel exposes:

• Global toggle — default ON. When OFF, all meters are uncapped (with a loud warning banner).
• Per-meter rows for email + sms + voice. Each meter has its own enabled toggle, mode (block | alert-only), and optional capCents override.
• Alert-only mode is the new escape hatch: for production agents where pausing voice mid-customer-call is worse than overspend, the operator can switch a single meter to alert-only. The 90% warning still fires, the 100% notification still fires, but traffic continues.

Server-side, updateHardCap is gated to master keys only — an ak_-keyed agent cannot lower its own ceiling, which would defeat the safety property. New unit tests cover the alert-only path, per-meter enabled precedence, and global-overrides-per-meter resolution. Closes the §10 0j PARTIAL.

Four long-form posts shipped to /blog covering the launch narrative:

• [Your AI Agent Doesn't Have An Identity. That's The Whole Problem.](/blog/your-agent-has-no-identity-2026) — category-defining manifesto. Why "API key in a .env file" is not identity, and what shipping a real per-agent identity requires structurally.
• [Inside Anima's Voice Guardrails: TCPA, RND, and Time-of-Day, Server-Side](/blog/voice-guardrails-tcpa-rnd-server-side) — the enterprise/security angle. Walks through every gate that runs before POST /voice/calls reaches the dialer, with the actual middleware paths.
• [The Cross-Channel Moment: One Correlation ID, Email + Voice, In a Single Agent Run](/blog/cross-channel-correlation-id-launch) — demo + data model + why we pulled audit_events forward to Week 1 instead of Week 4.
• [Why We Bet on Bundled Identity Instead of Point Solutions](/blog/bundled-identity-not-point-solutions) — narrative-depth post on the structural argument for owning email + voice + vault + phone behind one identity primitive.

Each post links to working CLI commands. am init provisions a fresh agent in 60 seconds; am voice place is the wedge demo every post references.

/pricing rebuilt on the canonical 5-tier table — Free, Starter $29, Growth $99, Scale $249, Enterprise from $999. Includes a live usage calculator and the full §19.4 rate card (email, SMS, voice, phone numbers, vault, MCP, A2A). Voice runs at promo rates — Basic $0.07/min, Premium $0.15/min — through Q3 2026.

Two new comparison pages: - /compare/agentmail — frame: AgentMail does email well, but you'll need phone, voice, and vault within three months. - /compare/agentphone — frame: same numbers, but Anima ships server-side TCPA + RND + time-of-day gates that AgentPhone leaves to you.

Operators no longer need to wrangle a Clerk session token in curl. The new /admin/vault-verify page runs the vault smoke-test battery (connectivity → round-trip → encryption envelope → cleanup) with one click. Gated by ANIMA_PLATFORM_ADMIN_EMAILS.

Refactored the platform-admin guard into a shared module that bypasses resolveAuth() (which required an active org context) and surfaces the actual error message instead of a generic 401.

Every email send, SMS, voice call, vault read/write, and phone provisioning now emits one row to audit_events under the request's correlation ID. Inbound email gets a synthetic correlation ID so reply chains link back to the trigger.

Two consumer surfaces: - `GET /v1/audit/events?correlation_id=...` — query the full chain for a workflow. - `GET /v1/events/stream` — Server-Sent Events stream that backs am tail for live tailing. - /audit in the dashboard — paste a correlation ID, see the chain rendered with channel badges and timestamps.

Track 2 T2.3 ("data moat") is fully active — every cross-channel interaction logged under an Anima identity makes the next one more valuable.

Trust-score gate scores every signup against three signals before the agent gets phone/voice access: domain age (RDAP), IP ASN classification (IPinfo Lite — free tier supported), and Stripe SetupIntent CVC + ZIP checks.

Pending signups land in /admin/review with the per-signal verdict, score, and reviewer notes. Default OFF (FEATURE_TRUST_SCORE_GATE) — flip in env once IPinfo + Stripe creds are provisioned.

Outbound voice now runs through three gates before the dial: - TCPA: requires consent_source assertion on every call; missing/malformed → fail-closed. - RND: Twilio Lookup against the FCC Reassigned Numbers Database. 30-day Postgres cache means repeat numbers are free. Numbers flagged "yes, reassigned" never dial. - Time-of-day: 8am–9pm local enforced from area code; state-stricter windows configurable per-org.

Per-tier daily call cap added to contain blast radius. ToS Section 11/23 updated with TCPA/DNC indemnification language. New /trust/tcpa-dnc page documents what Anima provides vs what stays the customer's responsibility.

New Scale tier at $249/mo for scaling startups before Enterprise — 500 identities, 10 phone numbers included, 1,500 min Basic + 300 min Premium voice, 4,000 outbound calls, 25K vault credentials, audit logs, SSO-lite.

Voice steady-state rates: Basic $0.08/min, Premium $0.18/min. Launch promo $0.07 / $0.15 through 2026-09-30.

Workflow-level correlation IDs now thread through HTTP, MCP stdio, and the response x-correlation-id header. One workflow → one ID across email + SMS + voice + vault, regardless of transport. Distinct from per-request x-request-id which stays unique per HTTP call.

Pure decision service that walks parent-child delegation grants (depth ≤ 10, cycle detection, scope narrowing). Sub-agent grants verify against a parent grant on every request; scopes can only narrow, never widen. Synchronous revocation propagation through the entire subtree — when a human revokes authority, every descendant agent loses access on the very next call.

Behind FEATURE_DELEGATION_ENABLED flag, default OFF. Full activation in the Day 31-45 push.

Two new CLI commands: - am doctor — single-command health check. Verifies config readability, API DNS, API health, auth validity, MCP registration. Each check is PASS/WARN/FAIL with timing. Triage answer in 3 seconds. - am tail — live event stream across all agent activity (email, SMS, voice, vault). Connects to /v1/events/stream with --filter <channel> and --agent <id> scoping. Auto-reconnects on disconnect.

13 engineering steps covering the launch gates: phone-flag gating, TCPA middleware, RND check, per-tier call cap, billing schema (Scale tier), Prisma migration, OAuth on-behalf-of, rate-limit middleware, trust-score signup gate, hard-cap toggle, correlation-ID propagation, delegation verifier, ToS legal updates.

Code-reality audit committed at repo root verifying every claim against actual source.

Consolidated 5 per-domain MCP repositories (mcp-agent, mcp-email, mcp-phone, mcp-vault, mcp-platform) into a single mcp-server deployment. One URL — https://mcp.useanima.sh/mcp — serves 190+ tools across 5 domains via path routing.

Result: one process to deploy, one set of credentials to rotate, one tool registry to keep authoritative.

7 PRs landed across anima, mcp-server, and cli adding managed-OAuth flows for vault-stored credentials. Connect Links provide one-click OAuth handshakes for 20+ services (Google, GitHub, Slack, Notion, Linear, etc.). Tokens land in the vault, refresh automatically, and serve to agents on demand.

Positioning: server-side masking for sensitive fields (refresh tokens dropped entirely from agent-visible responses), per-credential audit log, scoped delegation tokens.

Full voice catalog covering Telnyx Kokoro (basic), AWS Polly (basic), and ElevenLabs (premium). Filter by gender, language, tier, or provider. am voice catalog from the CLI shows the full list. resolveVoiceConfig() resolves a voice ID like telnyx:sarah or elevenlabs:rachel into a fully-typed config the dialer accepts.

Anima now deploys to GCP Cloud Run via Pulumi-managed infrastructure. Three services — anima-api, anima-web, anima-console — plus the consolidated mcp-server. Cloud SQL with private-IP networking, Vaultwarden VM for credential storage, Redis for rate-limit counters.

Migration path: anima-migrate Cloud Run job applies Prisma migrations atomically before the API deploy.

Official Go SDK at github.com/anima-labs-ai/go. Type-safe client for the Anima API, mirrors the TypeScript and Python SDKs. go get github.com/anima-labs-ai/anima-go to install.