Gunnar features
New Gunnar features from September to October 2026, with status, date, source path and commit. The list was made on 2026-10-28 from the main branches. Older history is not counted here.
Status: Live runs in the current release (R6, 2026-10-27, on gunnar.rs). Live (off) is in the release but switched off by default. Merged is on the main branch and not yet released. A source path starts with its repository (gunnar or gunnar-ui). A commit without a label is in gunnar.
Login, sessions, invites, step-up, company SSO, SCIM and CSV import use the shared edda identity crates (Gunnar uses edda nornir-identity and implements IdentityHost).
October 14 to 30, 2026
Console and accounts
| Feature | Status | Date | Source path | Commit |
gunnar settings changes a repository's visibility and default branch over SSH. |
Live | 2026-10-14 | gunnar/crates/gunnar-cli |
ba0822e7 |
gunnar create; a first push in sha256 creates a sha256 repository. |
Live | 2026-10-15 | gunnar/crates/gunnar-cli |
ef4ec6f6 |
| The account page buys and grows plans; a free account passes a card check first. | Live | 2026-10-18 | gunnar-ui/crates/gunnar-ui-web |
gunnar-ui 59be5c6d |
| The web UI is made for a wide audience (owner rights per repository, first push help, hide, plain words). | Live | 2026-10-18 | gunnar-ui/crates/gunnar-ui-web |
gunnar-ui 96ca7c5f |
| Everybody can import repositories from GitHub and Codeberg (SSH import stays operator-only). | Live | 2026-10-18 | gunnar/crates/gunnar-server |
623cc236, gunnar-ui 7c814f46 |
| History has a branch picker and an all-branches view. | Live | 2026-10-18 | gunnar/crates/gunnar-grpc |
3f0f4d61, gunnar-ui 9017177b |
| A stale passkey touch is asked for in place; one invite registers one passkey and is checked before the passkey is made. | Live | 2026-10-19 | gunnar-ui/crates/gunnar-ui-server |
gunnar-ui 7c6aa815, gunnar-ui 3e8f488f, gunnar-ui 70573f4e |
| The Principals table shows each person's last sign-in and last operation. | Live | 2026-10-21 | gunnar/crates/gunnar-server |
cd07bc2f, gunnar-ui b30c1648 |
| "Manage " beside Grow takes an instance owner to renew, stop renewing or terminate. | Live | 2026-10-22 | gunnar-ui/crates/gunnar-ui-server |
gunnar-ui f5d4a646 |
cargo install gunnar installs a startable server. |
Live | 2026-10-22 | gunnar/crates/gunnar |
df52a9d2 |
| gunnar.rs serves llms.txt, llms-full.txt, a readme and file tree per public repository, and a robots.txt that allows AI crawlers behind one switch. | Live | 2026-10-25 | gunnar-ui/crates/gunnar-public-site |
gunnar-ui 97526e66, gunnar-ui 81b4a7a8 |
| Gunnar's default build is an airgap build (no outbound calls); forge import is a default-off feature. | Live | 2026-10-25 | gunnar/crates/gunnar-recipe |
efda2e01 |
| An MCP connector for AI tools, behind a default-off feature, in no release yet. | Live (off) | 2026-10-25 | gunnar-ui/crates/gunnar-mcp |
f730eb5e, gunnar-ui 31cabe46 |
| The Gunnar CLI reaches the main's control plane through the front's port 443 with the caller's own credential (public on gunnar.rs). | Live | 2026-10-26 | gunnar/crates/gunnar-front |
bfbb8483 |
Company SSO is tested against a real Keycloak in a container (cargo xtask idp). |
Live | 2026-10-26 | gunnar/xtask |
d05729ff |
| An import is done only when all its references are present; otherwise it fails with the reason on the repository page. | Live | 2026-10-26 | gunnar/crates/gunnar-server |
e95cc71a |
| One encryption key per person on a YubiKey; the console opens encrypted files with the security key. | Live | 2026-10-27 | gunnar/crates/gunnar-crypt |
513ca0fc, gunnar-ui c8f140e4 |
| An "i" beside the repository encryption switch explains it. | Live | 2026-10-27 | gunnar-ui/crates/gunnar-ui-web |
gunnar-ui 27c85c3b |
| /login is only the login; sign-up is on the front page. | Live | 2026-10-27 | – | gunnar-ui 628eecca |
| Changing SSO providers, SCIM tokens or user imports needs a fresh step-up. | Live | 2026-10-27 | gunnar/crates/gunnar-grpc |
9f607d80 |
| A server setting change is written to the hash-chained audit trail before it is applied, or refused. | Live | 2026-10-27 | gunnar/crates/gunnar-grpc |
c27902d7, 13b84581 |
| The repository-created activity line names who created it. | Live | 2026-10-27 | gunnar-ui/crates/gunnar-ui-server |
gunnar-ui 285f0976 |
| SSO user import runs as a background job with a status page; ended sessions are signed out. | Merged | 2026-10-27 | gunnar/crates/gunnar-grpc |
7115b864, gunnar-ui e2498fd4 |
| Company SSO is a default-off feature of the server and the console. | Merged | 2026-10-27 | gunnar/crates/gunnar-recipe |
c237f47e, gunnar-ui 41f43c4f |
| An import is held to the memory the server may really use. | Merged | 2026-10-27 | gunnar/crates/gunnar-server |
216447e5 |
| The IndexNow key is an audited server setting that an administrator sets in the console. | Merged | 2026-10-27 | gunnar-ui/crates/gunnar-ui-server |
gunnar-ui 69e09229 |
| SSO domains proven by DNS, Rebind, just-in-time users, and an SSO discovery door limited per address. | Merged | 2026-10-28 | gunnar/crates/gunnar-grpc |
96bdc862, gunnar-ui 435a249a |
| The identity provider page (a two-press Remove, saved SAML values kept when no metadata is given). | Merged | 2026-10-28 | gunnar/crates/gunnar-grpc |
688d27f0, gunnar-ui fc19b517 |
| Every login, step-up, logout, invite, first admin and paid sign-up runs on the shared identity core. | Merged | 2026-10-28 | gunnar/crates/gunnar-grpc |
43fae822, gunnar-ui b1598523 |
| A Gunnar that sells nothing answers /signup with "This Gunnar is private. Ask its admin for an invite." | Merged | 2026-10-28 | gunnar-ui/crates/gunnar-ui-server |
gunnar-ui 93909bed |
| A laid main keeps the mail relay the ONE box feeds it and mails through it. | Merged | 2026-10-28 | gunnar/crates/gunnar-server |
0ecda8af, fef22e02 |
| The forge serves shallow and by-id fetches of blobs that were pushed as deltas (the git.gunnar.rs edda clone failure). | Merged | 2026-10-28 | gunnar/crates/gunnar-wire |
ee5f7f9b |
A new encrypted repository and a new encryption key are quantum-safe (ML-KEM-768 + X25519) unless classic is chosen, in the CLI and the console; gunnar crypt level quantum-safe upgrades a classic repository. |
Merged | 2026-10-30 | gunnar/crates/gunnar-crypt |
fac1b4e7, gunnar-ui a7626a7 |
| A security key's wrap of the encryption key is symmetric and quantum-safe (HKDF over its PRF secret, XChaCha20-Poly1305); an older X25519 wrap is re-wrapped on the next unlock. | Merged | 2026-10-30 | gunnar/crates/gunnar-crypt |
ec86a277, gunnar-ui 818b35a |
Estate and operations
| Feature | Status | Date | Source path | Commit |
| Gunnar's estate lifecycle is a monetize guest; the front takes updates and keeps its pairing. | Live | 2026-10-18 | gunnar/crates/gunnar-front |
8d5e9383, f31c4190 |
| A feed that changes any key reaches the running services (shared feed bus). | Live | 2026-10-20 | gunnar/crates/gunnar-server |
76e16478 |
| Gunnar runs on the shared PID 1, DHCP and clock crates (5558 lines of its own code deleted). | Live | 2026-10-21 | gunnar/crates/gunnar-server |
7e33c0f7, 20cb318f |
| Gunnar's lean shape; a box behind its front reaches SMTP, webhooks, mirrors and SSO through the front's egress door. | Live | 2026-10-24 | gunnar/crates/gunnar-server |
7087313c |
| The front's update re-admits boxes left behind, together, before a keep upgrade waits on them. | Live | 2026-10-25 | gunnar/crates/gunnar-front |
c8857a5c, 2cd07aed |
| A box's duties run as named jera jobs. | Live | 2026-10-26 | gunnar/crates/gunnar-server |
f3a94013 |
| Gunnar's front web half is the shared edda estate-front (2721 lines of fork deleted). | Live | 2026-10-27 | gunnar/crates/gunnar-front |
91a54464 |
Earlier (September 1 to October 13, 2026)
Everything here is live. Gunnar 1.4.0 went public on 2026-09-08 and Gunnar 1.5.0 shipped on 2026-10-12.
| Feature | Status | Date | Source path | Commit |
| Live update: a new app confirms after serving a minute and is rolled back otherwise. | Live | 2026-10-12 | – | efd85dda |
| Terminate a private Gunnar and restore its front from the console. | Live | 2026-10-12 | – | gunnar-ui f3e5b7e, gunnar-ui 89727f3 |
| A /cli page and CLI hints in the console. | Live | 2026-10-11 | – | gunnar-ui f699234 |
gunnar login device flow: a passkey touch enrols the CLI's own short-lived key. |
Live | 2026-10-10 | – | gunnar-ui b3d48c4 |
| The Twin panel with Review twin and Recharge from twin. | Live | 2026-10-10 | – | gunnar-ui 97a12ae |
| Encryption can be turned on for an existing repository; an appointed account admin. | Live | 2026-10-08 | – | gunnar-ui 41a0493, gunnar-ui f27caa0 |
| WireGuard-only links for every estate. | Live | 2026-10-06 | – | – |
| Company SSO (OIDC and SAML per account) and clans (groups). | Live | 2026-10-05 to 2026-10-06 | – | – |
| The new Gunnar logo, a third console theme, and an estate picture that follows the theme and shows live state. | Live | 2026-10-04 to 2026-10-06 | – | – |
| The pairing door on the front runs the estate's WireGuard hub, admits seeded boxes and certifies the twin. | Live | 2026-09-24 | – | 3fa5c9ad, 4f2d251f |
| The store-only twin. | Live | 2026-09-22 | – | – |
| A load bench; tenant-scoped tickets. | Live | 2026-09-16 to 2026-09-17 | – | – |
Runtime data-set growth inside the running appliance (gunnar control grow); twin heartbeat and streamed snapshots; PCI hot-plug reporting. |
Live | 2026-09-15 | – | – |
| The appliance sets and follows the front's signed clock. | Live | 2026-09-14 | – | – |
| A security hardening day (about 30 fixes: tokens, mirrors, sealed slots, CVE gate). | Live | 2026-09-11 | – | – |
| Activity per namespace per day; browse replicas; the fast-setup guide as a PDF. | Live | 2026-09-10 | – | – |