Restrict MCP clients to user graphs
Project administrators can now stop an MCP connection’s clients from reaching standalone graphs while still allowing access to identity-bound user graphs. The control appears on both Google Workspace and custom OIDC connections and is on by default, so existing connections are unchanged; disable it where clients should see only their own user graph.
Project creation is blocked before you hit your limit
When an account is at its project limit, the dashboard now greys out every create-project control with an explanatory tooltip instead of letting you start a flow the server would reject. Previously, launching “Create with wizard” at the limit produced a confusing error partway through and left the run stranded.
Pending episodes appear in graph episode listings
Listing a graph’s episodes now returns episodes that are still processing, not only ones that finished. Newly accepted episodes previously stayed absent from the listing until processing completed.
Onboarding wizard reliability fixes
The onboarding wizard no longer reports a just-created project as missing, collapses every backend failure into a generic 500, or lists shadow episodes that have no stored record. Failed sample generation now returns a clear message instead of an opaque error.
Governance documentation
Access-policy documentation now lives in a dedicated Governance section, and attribute-based access control (ABAC) has been retitled “policy-based agent access.”