Alarms: alarm and session sounds play in the browser again.
Sign-in: a session token never appears in a web address, so proxies, logs and browser history no longer keep it.
Search: Database Search, reports and every list in the web interface match only on fields the user may read, and NFC tag scans keep working for every role.
Extensions: an extension grants permissions only on its own types, and one installed from git cannot change permissions, roles or sessions, redefine another extension's types, or contain links. Reinstalling an integration you have used works even when your own mappers remain.
Programs: on shared cloud workers each tenant's programs have a memory limit, and a program that starts while its tenant is at that limit retries instead of stopping.
Integrations: every integration service now refuses a tag that targets a permission field or renames a protected entity.
AI assistant: only a conversation's user can send to it, approve its tool calls or waive approval, approvals show the call's arguments, and a conversation keeps its history after a restore.