Add quilr-web release notes for 567d7eaf9

docs/platform-areas/ai-inventory.md

@@ -71,6 +71,14 @@ type (macOS, Windows, Linux), approval status (Needs Review, Approved, Blocked),
 (Critical, Not Critical), and toggle off OS system processes. Execution policy (Allowed or Blocked)
 can be updated inline for each row.
 
+The Endpoint Agent detail drawer includes the same endpoint configuration tabs available from
+[Endpoint Agent](./endpoint-agent.md) Detection Configurations: **Guardrails** (DLP, category
+actions, and Access Control), **Monitored Browsers** (per-browser coverage), and **Group & User
+Rules** (scoped overrides for a smart group or individual user, shown once tenant context is
+resolved). Access Control changes made from this drawer are validated inline, and saving is blocked
+until any validation error is corrected; Group & User Rules save independently of the rest of the
+drawer.
+
 ### LLM Gateway
 
 The LLM Gateway source lists protected LLM application keys. It shows gateway-native metrics such as

docs/platform-areas/endpoint-agent.md

@@ -33,6 +33,8 @@ Use Endpoint Agent when you need to:
   features and supplying their required parameters from the Guardrails tab.
 - Auto-save for detection configurations — changes are persisted automatically after a short pause
   with a live status indicator in the toolbar.
+- Group & User Rules for scoping DLP behavior to a specific smart group or individual user.
+- A Monitored Browsers tab summarizing per-browser coverage for the selected app or method.
 
 ## Detection Configurations
 
@@ -44,6 +46,11 @@ Detection configurations auto-save. After any change, a status indicator in the
 the current save state (**Autosave pending**, **Saving...**, **Saved**, or **Save failed.
 Retrying...**). If a save fails, it is retried automatically.
 
+Each configuration drawer is organized into tabs: **Guardrails**, **Monitored Browsers**, and
+**Group & User Rules**. The same drawer and tabs are available from Endpoint Detection
+Configurations in Settings and from an Endpoint Agent asset's detail drawer in
+[AI Inventory](./ai-inventory.md).
+
 ### Guardrails Tab
 
 The Guardrails tab within each configuration drawer contains:
@@ -52,11 +59,32 @@ The Guardrails tab within each configuration drawer contains:
 - **Desktop monitoring** — Windows and macOS browser monitoring controls.
 - **Access Control** — one card per supported access-control feature. Each card has an enable/
   disable toggle and any required parameter fields (text, masked secret, numeric, toggle, or
-  dropdown). Required fields are validated inline; a validation error blocks auto-save until
+  dropdown). Required fields are validated inline; a validation error blocks saving until
   corrected. The Access Control section is hidden entirely when no features apply to the selected
   configuration. Only features the admin interacts with in the current session are included in the
   save; untouched features remain at their previously saved values.
 
+### Monitored Browsers Tab
+
+The Monitored Browsers tab shows per-browser coverage for the selected app or method, broken out by
+Windows and macOS. Admins can turn monitoring on or off for each detected browser without leaving the
+tab.
+
+### Group & User Rules Tab
+
+The Group & User Rules tab lets admins create DLP overrides scoped to a specific smart group or
+individual user, for either all methods in an app group or a single method.
+
+- **Scope types:** Smart group or individual user (by email).
+- **Overrides:** DLP enabled state, and data-risk and adversarial-risk category enablement and
+  action (Monitor, Block, Justify) for the selected scope. Fields left unset inherit the app or
+  method's default configuration.
+- **Save behavior:** Each rule is created, edited, and deleted independently with its own save
+  action — rules do not save with the rest of the configuration drawer.
+- **Effective Settings preview:** Enter a user email or smart group to resolve the merged
+  configuration that scope would receive.
+- Available only when at least one tenant is resolved for the signed-in user.
+
 ## Main Workflows
 
 1. Configure endpoint deployment and tenant-level management settings.
@@ -67,7 +95,9 @@ The Guardrails tab within each configuration drawer contains:
    monitoring.
 6. If the configuration supports Access Control features, open the Guardrails tab, enable the
    desired features, and supply any required parameters.
-7. Changes save automatically. Review the toolbar status indicator to confirm the save completed,
+7. Use Monitored Browsers to confirm per-browser coverage, and Group & User Rules to scope
+   overrides to a smart group or individual user when needed.
+8. Changes save automatically. Review the toolbar status indicator to confirm the save completed,
    then review endpoint findings for operational impact.
 
 ## Related Platform Areas

docs/release-notes/index.md

@@ -8,6 +8,27 @@ hide_copy_dropdown: true
 
 # Release Notes
 
+## July 7, 2026
+
+### New
+
+- [AI Inventory](/platform-areas/ai-inventory): The Endpoint Agent detail drawer now includes
+  **Monitored Browsers** and **Group & User Rules** tabs alongside the existing **Guardrails** tab,
+  matching the configuration drawer in [Endpoint Agent](/platform-areas/endpoint-agent) Detection
+  Configurations. Monitored Browsers shows per-browser coverage for the selected app or method.
+  Group & User Rules lets admins scope DLP overrides to a specific smart group or individual user
+  directly from AI Inventory; it appears once tenant context is resolved and saves each rule
+  independently of the rest of the drawer.
+
+### Fixed
+
+- [Endpoint Agent](/platform-areas/endpoint-agent): Fixed Access Control changes made from the
+  Guardrails editor in AI Inventory not being persisted on save. Access Control toggles and
+  parameter values entered from the AI Inventory drawer are now included in the saved
+  configuration, with the same inline validation used in Settings — a validation error blocks the
+  manual Save action until it is corrected. When an app group has multiple detection rows, Access
+  Control changes are now saved once per group instead of being submitted redundantly for every row.
+
 ## June 26, 2026
 
 ### New