What shipped in each version is in the
release notes; this is what's ahead.
Candidates
Connectors: browser clients (claude.ai among them) sign in to the MCP
endpoint with OAuth rather than a pasted token—dynamic client registration
on eitri-oidc, so a connector enrols itself
Public gateway: route inbound traffic to guest services through eitri,
building on published ports
Hot-reload trusted CAs into running guests: a CA added to the tenant reaches
guests that already exist—delivery over vsock or a host file mount that sshd
reads per connection, so no recreation and no SSH bootstrap problem. Needs
changing a tenant's trust set to demand more than a bearer PAT first, or a
stolen token becomes access to every guest