CHANGELOG

What changed

2026-11-08 · Veritas and the browser extensions

Veritas on COSMOS: `veritas.verify` checks an AI receipt with Veritas's own verifier and returns the verdict, every check and a certificate of verification. Passport, session, approval and containment tools are listed and say which Veritas service is not running yet.
Cosmic Unicorn and Cosmic Chariot browser extensions: sign in with COSMOS, downloads for Chrome, Edge and Firefox with SHA-256, privacy policy at /extensions/privacy.
Anonymous public verify (POST /v1/veritas/verify) is built and switched off until the owner confirms.
Models leg live: provider list, estimates and free charts; paid generations wait for Reach's confirmation routes.

Public developer site at cosmic-mcp.app: quick start for Claude, ChatGPT, Cursor, VS Code and Claude Code, auth guide, live tool catalog, API reference, status page.
Signed-in home at /home: your connected clients (disconnect any), legs and their health, tools, your own activity. Admins approve or deny new clients and verify the audit chain.
Sign-in now lands on /home.

COSMOS signs you in through your Reach account (Google sign-in at reach-usa.com). No separate COSMOS password.

MCP endpoint https://cosmic-mcp.app/mcp (Streamable HTTP, MCP 2025-06-18) with OAuth 2.1 + PKCE.
ICARUS leg (Reach content intelligence) and the Browser leg (cosmos-bridge + the TheOne Agent extension).
Every call is checked by the gateway (scopes, tenancy, policy, confirmations) and written to a hash-chained audit log.