From 5c745daeb00b4811e2f4c59d5d2f91e1a5e3e737 Mon Sep 17 00:00:00 2001 From: "github-actions[bot]" <41898282+github-actions[bot]@users.noreply.github.com> Date: Tue, 7 Jul 2026 09:29:47 +0000 Subject: [PATCH] Add quilr-web release notes for 567d7eaf9 --- docs/platform-areas/ai-inventory.md | 8 +++++++ docs/platform-areas/endpoint-agent.md | 34 +++++++++++++++++++++++++-- docs/release-notes/index.md | 21 +++++++++++++++++ 3 files changed, 61 insertions(+), 2 deletions(-) diff --git a/docs/platform-areas/ai-inventory.md b/docs/platform-areas/ai-inventory.md index d4c142d..3c08843 100644 --- a/docs/platform-areas/ai-inventory.md +++ b/docs/platform-areas/ai-inventory.md @@ -71,6 +71,14 @@ type (macOS, Windows, Linux), approval status (Needs Review, Approved, Blocked), (Critical, Not Critical), and toggle off OS system processes. Execution policy (Allowed or Blocked) can be updated inline for each row. +The Endpoint Agent detail drawer includes the same endpoint configuration tabs available from +[Endpoint Agent](./endpoint-agent.md) Detection Configurations: **Guardrails** (DLP, category +actions, and Access Control), **Monitored Browsers** (per-browser coverage), and **Group & User +Rules** (scoped overrides for a smart group or individual user, shown once tenant context is +resolved). Access Control changes made from this drawer are validated inline, and saving is blocked +until any validation error is corrected; Group & User Rules save independently of the rest of the +drawer. + ### LLM Gateway The LLM Gateway source lists protected LLM application keys. It shows gateway-native metrics such as diff --git a/docs/platform-areas/endpoint-agent.md b/docs/platform-areas/endpoint-agent.md index 9c4d95e..2c36db6 100644 --- a/docs/platform-areas/endpoint-agent.md +++ b/docs/platform-areas/endpoint-agent.md @@ -33,6 +33,8 @@ Use Endpoint Agent when you need to: features and supplying their required parameters from the Guardrails tab. - Auto-save for detection configurations — changes are persisted automatically after a short pause with a live status indicator in the toolbar. +- Group & User Rules for scoping DLP behavior to a specific smart group or individual user. +- A Monitored Browsers tab summarizing per-browser coverage for the selected app or method. ## Detection Configurations @@ -44,6 +46,11 @@ Detection configurations auto-save. After any change, a status indicator in the the current save state (**Autosave pending**, **Saving...**, **Saved**, or **Save failed. Retrying...**). If a save fails, it is retried automatically. +Each configuration drawer is organized into tabs: **Guardrails**, **Monitored Browsers**, and +**Group & User Rules**. The same drawer and tabs are available from Endpoint Detection +Configurations in Settings and from an Endpoint Agent asset's detail drawer in +[AI Inventory](./ai-inventory.md). + ### Guardrails Tab The Guardrails tab within each configuration drawer contains: @@ -52,11 +59,32 @@ The Guardrails tab within each configuration drawer contains: - **Desktop monitoring** — Windows and macOS browser monitoring controls. - **Access Control** — one card per supported access-control feature. Each card has an enable/ disable toggle and any required parameter fields (text, masked secret, numeric, toggle, or - dropdown). Required fields are validated inline; a validation error blocks auto-save until + dropdown). Required fields are validated inline; a validation error blocks saving until corrected. The Access Control section is hidden entirely when no features apply to the selected configuration. Only features the admin interacts with in the current session are included in the save; untouched features remain at their previously saved values. +### Monitored Browsers Tab + +The Monitored Browsers tab shows per-browser coverage for the selected app or method, broken out by +Windows and macOS. Admins can turn monitoring on or off for each detected browser without leaving the +tab. + +### Group & User Rules Tab + +The Group & User Rules tab lets admins create DLP overrides scoped to a specific smart group or +individual user, for either all methods in an app group or a single method. + +- **Scope types:** Smart group or individual user (by email). +- **Overrides:** DLP enabled state, and data-risk and adversarial-risk category enablement and + action (Monitor, Block, Justify) for the selected scope. Fields left unset inherit the app or + method's default configuration. +- **Save behavior:** Each rule is created, edited, and deleted independently with its own save + action — rules do not save with the rest of the configuration drawer. +- **Effective Settings preview:** Enter a user email or smart group to resolve the merged + configuration that scope would receive. +- Available only when at least one tenant is resolved for the signed-in user. + ## Main Workflows 1. Configure endpoint deployment and tenant-level management settings. @@ -67,7 +95,9 @@ The Guardrails tab within each configuration drawer contains: monitoring. 6. If the configuration supports Access Control features, open the Guardrails tab, enable the desired features, and supply any required parameters. -7. Changes save automatically. Review the toolbar status indicator to confirm the save completed, +7. Use Monitored Browsers to confirm per-browser coverage, and Group & User Rules to scope + overrides to a smart group or individual user when needed. +8. Changes save automatically. Review the toolbar status indicator to confirm the save completed, then review endpoint findings for operational impact. ## Related Platform Areas diff --git a/docs/release-notes/index.md b/docs/release-notes/index.md index 75c4338..cf36396 100644 --- a/docs/release-notes/index.md +++ b/docs/release-notes/index.md @@ -8,6 +8,27 @@ hide_copy_dropdown: true # Release Notes +## July 7, 2026 + +### New + +- [AI Inventory](/platform-areas/ai-inventory): The Endpoint Agent detail drawer now includes + **Monitored Browsers** and **Group & User Rules** tabs alongside the existing **Guardrails** tab, + matching the configuration drawer in [Endpoint Agent](/platform-areas/endpoint-agent) Detection + Configurations. Monitored Browsers shows per-browser coverage for the selected app or method. + Group & User Rules lets admins scope DLP overrides to a specific smart group or individual user + directly from AI Inventory; it appears once tenant context is resolved and saves each rule + independently of the rest of the drawer. + +### Fixed + +- [Endpoint Agent](/platform-areas/endpoint-agent): Fixed Access Control changes made from the + Guardrails editor in AI Inventory not being persisted on save. Access Control toggles and + parameter values entered from the AI Inventory drawer are now included in the saved + configuration, with the same inline validation used in Settings — a validation error blocks the + manual Save action until it is corrected. When an app group has multiple detection rows, Access + Control changes are now saved once per group instead of being submitted redundantly for every row. + ## June 26, 2026 ### New