What shipped, when it merged. Entries describe released work only — features that are built but switched off in production say so.
Truth & indexability release
Fixed the www subdomain serving a de-indexed duplicate of the homepage; www now permanently redirects to the apex domain.
Truth audit of the marketing site: removed placeholder testimonials and unverifiable statistics, relabeled Twilio SMS as not yet available, and made the ROI calculator label its output as the visitor’s own assumption.
CI now crawls the fully rendered site and fails on broken canonicals, accidental noindex, invalid structured data, or structured data that advertises content not on the page — plus browser-level journey and accessibility tests.
Closed DNS-rebinding attacks on outbound requests: customer- and partner-supplied URLs are re-screened at the resolved address and pinned at connection time.
Published this changelog, the security page, and the about page.
Q&A-only partner catalogs
Partner catalogs can now be contract-restricted to Q&A-only knowledge, enforced server-side rather than by convention.
Exchange v1 (feature-flagged) and reliability hardening
Exchange v1: cross-partner service discovery with explicit opt-in, deterministic trust-aware ranking, geo constraints, and conversion attribution. Feature-flagged OFF in production while supply density grows.
A week of correctness hardening across booking confirmation, replay windows, idempotency leases, and lease takeovers — verified against the real database layer in CI.
Docker publishes are now cross-compiled; multi-hour emulated builds eliminated.
Gateway two-phase booking and transactional provisioning
Third-party AI agents now book through a prepare/confirm capability flow: single-use, expiry-signed tokens, server-stored arguments, and a database uniqueness guarantee that one capability can produce at most one booking.
Tenant provisioning became a single database transaction — a mid-sequence failure can no longer strand a half-created business.
Lead capture became exactly-once: duplicate submissions converge on the same lead and the same notifications.
Partner fleet API: directory search across a partner’s own businesses with policy-filtered visibility and idempotent lead routing.
Agent Gateway: every business is agent-bookable
Every Amfion business can expose a standard MCP endpoint: third-party AI assistants inspect verified business information, check live availability, capture leads, and book — under the same limits, deposits, and answer policies as the website assistant.
Discovery via /llms.txt and /.well-known/mcp.json on every business domain.
Verified knowledge and the internal scheduling engine
Knowledge trust platform: every fact carries an assertion state (unverified through verified) with source provenance; answer policies are enforced server-side and answers report the stored trust of what they cited.
Internal scheduling engine: businesses can take bookings without any external calendar account — weekly hours, group capacity, staff assignment, and database-enforced concurrency.
Google Calendar sync with busy-block awareness; revoked connections surface a reconnect prompt instead of silently failing.
Activation-first onboarding
Signup now takes a website URL and trains the assistant from it before the owner first lands in the dashboard.
Agent-directed website import: the extraction model chooses pages through a sandboxed crawler with strict origin pinning and budgets; nothing applies without owner approval.
The admin home became a milestone setup guide with a live assistant preview.
Lifecycle email engine, customer memory, and deposits
Lifecycle emails went live: waitlist slot-open backfill, booking reminders (off by default), rebooking nudges, and review requests — each send exactly-once, marketing kinds honoring suppressions with unsubscribe links.
The assistant now recognizes returning customers: linked sessions carry contact and coarse visit history.
Booking deposits through Stripe Connect: services can require a deposit; funds settle directly with the business.
Stop letting bookings slip away.
Put an AI receptionist on your site today. Free for 14 days, live in 5 minutes.
