157 entries · August 2026 – October 2026
Newsroom
Product changes, pricing and privacy. What changes for you, newest first.
Gray to violet: background to important changes. Editorial user impact, not security severity.
- A crystal workspace for chat The dark chat workspace now uses the Crystal design, with a clearer composer and matching tool panels.
- Container start shows a real percentage, Running only when ready The Starting view now counts real steps, and Running appears only after a readiness check. On a cold VM that is 41 seconds with no early Running.
- Sub-agents for cheaper chats, and "ultracode" as a one-turn word The chat agent can now hand mechanical work to cheap sub-agents without Ultracode. The word "ultracode" allows workflows for one turn instead of switching them on for good.
- Tailscale one click: cancel and try again no longer breaks Cancelling and clicking again while a slow container starts now works. The view shows what it waits for, and the tab always says why.
- In the media: Let's Data Science on why hiding agent API keys is not enough Let's Data Science published an interview with our founder about key placeholders, approvals and goal checks. The outlet did not test the service.
- Fixes from a tester report: login links, terminal start, machine plan hint More login addresses open the sign-in window, the terminal waits briefly for a freshly started container, and a Pro account sees a plain plan hint for own machines. More login addresses open sign-in, and the terminal waits briefly after a container starts.
- Passkey confirmation for vault changes, and use only for databases Changing where a secret may go, or showing it, needs your passkey, checked by the key service itself. The key service also reports every change to your protection to you directly. Vault changes and showing a secret now need your passkey, and databases work with use only.
- Credentials in tool output are blacked out before storage and before the model A command like env could print a proxy password into the chat. Output of tools now passes a blackout step before it is stored or sent to a model provider. Passwords and keys printed by commands like env are masked before storage and before they reach a model provider.
- A pasted file is no longer left behind when you press Enter If you pasted a long text and pressed Enter at once, the message could go out without the file. The chat now reads the attachments at the moment of sending. Pasting a long text and pressing Enter now always sends the pasted file with the message.
- Ultracode agents follow your permissions, and you can see what they do Agents of an Ultracode run now run only what the approval level of the chat allows, and a fixed line above the message box shows their commands, errors and requests while they work. Ultracode agents now ask before risky commands and a status line above the message box shows what they do.
- Vault entries now have three states Visible, use only or locked: the AI reads a value only where you release it, or works with a placeholder and never sees the real one. Each vault entry is visible, use only or locked, so the AI can work with a placeholder and never see the real value.
- Helper jobs now run on your own key With your own provider key, summaries, /goal checks, Deep Research helpers and similar jobs now use a small model of that provider instead of a platform model. With your own provider key, helper jobs now run on a small model of that provider instead of a platform model.
- The Stop button now stops what is running Stop used to end the chat view at once while a tool, a workflow or a /goal kept going. Now it reaches all of them, and the button says so until the server confirms. The Stop button now ends running tools, goals and workflows, and shows Stopping until the server confirms.
- Choose your own checking model on your own key With your own key you pick the model that checks a Ultracode run. Every provider has a default checker, and a wrong choice is refused at the start.
- Attached files reach research runs, DeepSeek tool calls no longer break chats Files you attach to a chat now reach Deep Research and Ultracode runs, and raw DeepSeek tool calls run instead of printing markup. Chat attachments now reach Deep Research and Ultracode runs, and DeepSeek tool calls run properly.
- Ultracode finds the right model id on your own key Agents no longer have to guess the model id for a Ultracode run. Bare names resolve to your account, and a wrong name gets the list of valid ids.
- Your own Anthropic key now gets prompt caching Chats on your own Anthropic key were never read from the cache. ZeroLog now uses the native Messages API, so repeated input is billed at the cached price.
- Start page: smooth scrolling on computers without a graphics card The new start page was slow on computers without a graphics card. A scroll pass that took 51 seconds now takes 9. The look is the same.
- Privacy policy 1.9.9: a technical access log, kept 14 days The proxy and the app now write one line per response to a log that only root can read. It holds no IP address, no account and no content, and it is deleted after 14 days. A new 14-day access log without IP or account helps find faults; the privacy policy now names it.
- 25 October: product pages in the new look, a scroll camera start page, fewer lost requests Product, pricing, agents, FAQ, investor and status pages moved to the new look. The start page got a scroll camera, and slow or lost page requests are retried once. Most public pages share a new look, and slow or lost page loads are retried once.
- 24 October: new start page look, calmer docs, two fixes The start page got a product first headline and the new crystal look, the docs shell was calmed down, and two server and page fixes shipped. The start page and docs got a calmer new look, and two server and page fixes shipped.
- 23 October, late: ZeroLog Desktop 0.2.0, new docs pages, corrected site text Desktop 0.2.0 adds an SSH terminal, the drive and Tailscale in one click. Four docs pages are new, and several outdated statements on the site were corrected. Desktop 0.2.0 adds an SSH terminal, the drive and Tailscale in one click.
- Privacy policy 1.9.8: the admin log keeps only the target ID for customer data Admin views and actions that concern a customer are now logged with who, what address, status, size and the ID of the affected object. No content, no search terms, no error text. The admin log now keeps only IDs, status and sizes for views that concern customer data.
- 23 October (continued): key proxy view, newsroom design, documentation corrections The key proxy settings page was rebuilt and the newsroom got the new design. Several documentation pages were corrected.
- Privacy policy 1.9.7: a detailed log for administrator accounts only A detailed operations log now exists for administrator accounts only. Customer accounts stay zero-log, but customer data shown in admin views can appear in the log.
- 23 October, evening: live permission switching, faster Tailscale connect, sidebar divider, measured deploy Chat permissions switch live, Tailscale connect answers in seconds and the sidebar has a divider. A probe measured a deploy with 0 failed requests of 1786. Chat permissions and tool levels now switch live, and Tailscale connect answers within seconds.
- 23 October: one-click Tailscale and Connect, a wider key proxy, a new look Containers connect to Tailscale, drive and SSH in one click. The key proxy has 93 provider templates and Microsoft 365, and BYOK asks for consent on third-country providers. Tailscale, drive and SSH connect in one click, and the key proxy offers 93 provider templates.
- 22 October (continued): public pages corrected, new landing pages, more audit fixes Public pages were corrected to match the code and four landing pages were added. Further audit fixes went live in the evening.
- 22 October: security audit fixes and a zero-downtime deploy path An audit of our own code led to fixes for access, billing, uploads and agents. Deploys can now switch between two app slots behind a proxy; the first real switch in production ran on 23 October.
- 21 October (continued): terminal display fixes, start page fixes, login redirects Several terminal and sign-in fixes also went live on 21 October. The earlier entry of the day does not list them.
- 21 October: terminal assistants stay current, Codex starts again, public claims corrected Terminal assistants build from their latest release, Codex starts again and sign-in links open only after your click. Several public pages were corrected to match the code. Terminal assistants start current, Codex works again and sign-in links open only after your click.
- Privacy policy 1.9.6: three security fixes, each with its limit Encrypted memory now reaches the model only in chats with memory on. Vault chats are refused on unconfirmed routes. Container network credentials are bound to their container. Each fix has a stated limit. Encrypted memory entries now go to the AI model only in chats with memory on, and you see how many. Vault chats are refused on routes without a confirmed retention commitment. Nothing to accept again.
- 20 October: Desktop page, directory link, German newsroom posts ZeroLog Desktop has its own page, the start page footer links to a directory listing, and 25 newsroom posts have a German version. ZeroLog Desktop now has its own page, and a directory link and German news posts were added.
- Privacy policy 1.9.5: encrypted memory protects storage only Our earlier wording overstated the encrypted memory. It protects stored entries, but entries in use go to the AI model in plain text. Version 1.9.5 says so. The encrypted memory protects stored entries only: entries in use are sent to the AI model in plain text, so it is not end-to-end. Nothing to accept again.
- ZeroLog Desktop: a native app for Chat and Code, now in preview ZeroLog Desktop is a native Windows app for your zerolog.ch account, with Chat and Code as two separate workspaces. It runs without a browser engine and is in preview. Adds a native Windows preview app for Chat and Code on the same account; the web stays unchanged.
- Android 2.0.0-a3: a new look and phone jobs The Android app has bottom tabs and phone jobs: a plan card in the chat, then the agent works on your phone while you watch. You need to uninstall 2.0.0-a1 once. Android 2.0.0-a3 adds bottom tabs and phone jobs. Because of a new signing key, users must uninstall 2.0.0-a1 and reinstall once.
- Terms of Service 1.7: notice periods by plan Terms 1.7 changes clause 12.2 only. Paid plans keep 30 days of notice, free and preview features get 14 days, and urgent or favourable changes apply at once. Terms 1.7 sets notice periods by plan: 30 days for paid plans, 14 days for free and preview features.
- Card and USDC payments via MoonPay: parked payments are credited, wrong ones are not A MoonPay payment that arrived before it could be matched to your account can now be credited later. Payments in another currency or marked failed are not credited. If a MoonPay payment was parked and your credit never arrived, it can now be booked, and if it is still missing you write to info@zerolog.ch with the payment time.
- Privacy policy 1.9.4: memory is encrypted per account The memory paragraph now says that entries are encrypted with a key per account, and states plainly that this is not end-to-end encryption. The privacy policy now says memory is encrypted per account but not end-to-end, and you do not need to accept anything again.
- Memory is now encrypted per account Memory entries, writing-style samples, agent memory and the agent journal are stored encrypted with a separate key for each account. This is not end-to-end encryption.
- The Firefox extension is now signed by Mozilla Firefox accepts version 0.3.1 of the extension because Mozilla signed it as an unlisted add-on. Firefox users must install the signed 0.3.1 file from the extension page, which needs Firefox 140 or newer and does not update itself.
- 19 October: Docker API filter, tighter container egress, Retry-After on rate limits The Docker API on the host sits behind a filter, outgoing traffic from the default Docker bridge is restricted, and rate-limited pairing endpoints say when to retry.
- 19 October: terms 1.5 and 1.6 Terms 1.5 set plans and prices in the morning. Terms 1.6 replaced it the same day with five plans, the compute boost and the per-run limit.
- A 17-minute stall on 19 October: cause fixed, watchdog added From 22:24 to 22:41 UTC the server accepted no requests. A model-routing loop caused it. It is fixed, and a watchdog now restarts a frozen server after 60 seconds. ZeroLog did not answer for 17 minutes on 19 October; nothing for you to do, and a watchdog now restarts a frozen server after about a minute.
- Open in editor: the web IDE is one click away The container overview and the chat context bar have an "Open in editor" button, and the editor no longer refuses to load behind the proxy. On Mini and higher, one click on "Open in editor" starts the web editor for your container in a new tab, and Free accounts are pointed to the plans.
- Browser extension 0.3: connect with one click, and the agent gets its own tab The extension has a new side panel and connects to your account with a click. Since 0.3.1 the agent opens its own tab in a ZeroLog tab group. Installed extension copies do not update themselves, so you download the 0.3.1 package from the extension page (Chrome: replace the folder and reload; Firefox: install the signed file).
- The terminal now offers eleven coding assistants Pick Claude Code, Codex, ZeroLog Code, opencode, Kilo Code, goose, pi, Qwen Code, Nanocoder or Kimi Code in the terminal panel. With a container (Mini or higher) you can now pick from eleven coding assistants in the terminal; nine use your ZeroLog credit, Codex and Claude Code with your own account do not.
- A redesigned chat view and a first-time setup The chat has a new start view and a context bar beside the conversation. Accounts that have not finished the setup are guided through it once. The chat looks different, and if you have not finished the setup you are sent once per browser to a German-only setup screen that you can leave with «Später fortsetzen».
- Five plans, a compute boost and a time limit for /goal runs ZeroLog now has Free, Mini, Pro, Max and Ultra. Free has no container; paid plans start at CHF 9 a month. The Free plan no longer includes a container or starter credit, so if you have a container on Free you need Mini or higher to start or resume it.
- Product pages, an FAQ and comparison pages ZeroLog Code, the mobile app and the browser extension now have their own pages, plus an FAQ and three comparisons. ZeroLog Code, the mobile app and the browser extension now have their own pages plus an FAQ and three comparisons, and nothing changes for your account.
- 18 October: products circle the ZL on the start page, taller chat list The start page shows the products orbiting the ZeroLog mark, and the sidebar shows more chats.
- Sign in directly on the start page The sign-in form now sits on the start page, and after you sign in the view zooms into your real workspace. Signing in now happens on the start page itself, and if you are already signed in, pressing Sign in takes you straight into the app.
- 16 October: Remotion in the design tool, start page fixes The design tool can render Remotion videos on request, and the new start page got accessibility and structured-data fixes.
- Use your own Anthropic key in the chat Add an Anthropic API key under Settings, Providers and keys, and pick the new anthropic-byok models in the chat. If you have your own Anthropic API key, you can add it under Settings and use the anthropic-byok models, which follow Anthropic's data rules instead of ZeroLog's zero-data-retention promise.
- A new start page, a quicker app and large attachments that fit zerolog.ch has a new start page. Settings toggles respond at once, and big text attachments stay in your container instead of filling the chat context.
- 15 October: privacy policy 1.9.2 and 1.9.3, terms 1.4 The privacy policy states Featherless's written commitment and the list of its subprocessors. Terms 1.4 and German versions of the legal texts were prepared.
- 15 October: SSH to worker containers, Stop on long tool calls, Office files stay out of prompts SSH reaches containers that run on worker nodes. Stop ends long tool calls at once, and Office files are no longer pasted into prompts as raw bytes.
- 13 October: admin second factor, pinned worker keys, restore fixes Several hardening steps and two restore fixes went live in the evening.
- 13 October: privacy policy 1.8.3 to 1.9.1 Several updates of the privacy policy went live on 13 October. The terms were changed editorially, and the version stays 1.3.
- 13 October: sign-in only through Keycloak, Leonardo, Gemini CLI and Antigravity removed ZeroLog has one sign-in path, the Keycloak login at auth.zerolog.ch. Three providers and the invitation codes are gone.
- Preview links now expire, and backups are encrypted offsite Container preview links last 7 days by default and can be revoked. Backups are encrypted before they leave the server and copied to a second machine. Preview links created before this update stop working on 20 October 2026 at 15:44 UTC, so create a new link before then if someone still needs access.
- Android 2.0: the app no longer shows a web page Version 2.0.0-a1 draws chat, Compute, jobs and your files itself instead of loading zerolog.ch in a built-in browser. The Android app is now rebuilt as a native alpha, and you can install 2.0.0-a1 over your current version while 1.21.7 stays available as a fallback.
- Android 1.21.7: one app window and a second fix for the empty chat Version 1.21.6 did not fix the empty chat view on every phone. Version 1.21.7 addresses a second cause. If your Android chat view was still empty after 1.21.6, install 1.21.7 from the app page over your current version.
- Android 1.21.6: the chat view is back On some phones the Android app showed an empty dark area instead of the chat. Version 1.21.6 fixes the cause. If your Android app showed an empty dark area instead of the chat, install 1.21.6 from the app page over your current version.
- Android 1.21.5: more detail on the empty chat view Version 1.21.5 collects layout measurements so we can find out why some phones show an empty chat view. Version 1.21.5 sends anonymous layout measurements from phones with an empty chat view, and you do not need to do anything.
- Android 1.21.4: the app notices an empty chat view Some phones still show a dark, empty area instead of the chat. Version 1.21.4 now detects that case and shows a reload button. If your Android app still showed an empty chat area, 1.21.4 now detects it and offers a reload button, so install it from the app page over your current version.
- Android 1.21.3: back to the start page after a missing page When the Android app opened a ZeroLog page that no longer exists, it stayed on the error. Version 1.21.3 returns to the start page instead. If your Android app got stuck on a "page not found" error, 1.21.3 returns to the start page, so install it from the app page over your current version.
- 12 October: remote chat fixes and key service restore fix Remote chats follow the right connection and turn. A restore error in the key service was fixed.
- Android 1.21.2: no more silent black screen Some phones showed only a black area under the top bar after starting the app. Version 1.21.2 now says what went wrong and offers a reload. If your Android app showed a silent black area, 1.21.2 now explains what went wrong and offers a reload, so install it from the app page over your current version.
- A gallery for designs Settings > Appearance now has a gallery of designs made by other accounts. You can preview them, save a copy or report one. Settings > Appearance has a gallery where anyone signed in can preview designs from other accounts, adding a copy needs Mini or higher, and submitting your own needs Max.
- Privacy policy 1.8.1: appearance settings The privacy policy now describes what the new appearance settings store, where your background image lives and how to delete it. The privacy policy now explains what the appearance settings store and how to delete your background image, and nothing else changed.
- Appearance settings, motion in Design and Android 1.21 A new Appearance page sets presets, accent colour, background, motion and layout. Design now checks animations, and the Android app keeps your drafts. Settings has a new Appearance page for presets, accent colour, background, motion and layout, and Android 1.21.1 is available from the app page after signing in.
- Live context and visible browser actions Context estimates update as you type. The browser extension shows AI activity in the affected tab and lets you stop its action. Live context estimates, visible browser actions and tools loaded on demand.
- 10 October: development tasks, owner-only design memory, legal tables Jobs has a form for development tasks, and design memory is now strictly per owner.
- Waitlist confirmation, Designer playback and your coding account Waitlist confirmation is fixed. Designer previews add playback and MP4 export; Codex and Claude Code offer native account login in private workspaces. Repairs email confirmation and adds Designer playback, private MP4 export and native coding login in your workspace.
- 9 October: new homepage and newsroom layout The homepage and the newsroom have a new layout. Newsroom entries show how much each one changes for you.
- 9 October: explicit tool mode, allowlisted commands back, Compute and chat fixes Chats use an explicit tool mode. The allowlisted-commands approval mode is available again, and Compute handles restore and previews more reliably.
- 8 October: new Compute overview, Business admin centre, access checks Compute has a new overview with workload details and usage charts, and the Business panel was replaced. Two access checks were tightened.
- 7 October: settings reorganised, complete data export, retryable account deletion Settings are split into separate sections. The personal data export and the account deletion cleanup were reworked.
- 6 October: grounded mode fix, CLI engines in the design panel, key proxy details Chats create files reliably again, and design files from Claude Code, Codex and Gemini open in the design panel.
- Key proxy: your agents use your API keys without ever seeing them Keys for Cloudflare, Stripe, GitHub and other services now live in a separate key service, and agents in your workspace only ever get a placeholder. Introduces key proxy and passkey-gated credentials for third-party API integrations without exposing secrets to agents.
- Outbound traffic now has limits, not only an allow-list A handful of service ports are closed for every workspace, and traffic that looks like scanning or password guessing slows down and then stops. Adds outbound limits and closes certain ports; verified testing remains possible within its scope.
- The layer that runs your workspace is now fenced in too The part of the host that executes your workspace can no longer read ZeroLog's own keys, database or configuration. Internal sandbox runtime hardening that prevents the execution layer from accessing host secrets without altering workspace behavior.
- Workspaces no longer share processor cores with other machines The machines that run ZeroLog workspaces now keep their processor cores and memory pages to themselves, which closes two known ways of observing a neighbour through shared hardware. Backend hardware isolation preventing shared CPU hyperthreads and memory deduplication between workspaces.
- A fourth approval mode: allowlisted commands only Between asking every time and accepting edits automatically, a chat can now run the commands you trust without asking and still ask about everything else. Adds a new approval mode enabling trusted commands to run automatically while prompting for everything else.
- Privacy policy and terms updated The privacy policy now covers design artifacts and the stronger workspace isolation, and the terms say how preview links work.
- Open any design again with one click Closed the design panel and want the file back? Every design file in a chat now has Preview and Code buttons, and the Files page opens files right next to the list. Adds direct Preview and Code action buttons to design files in chat messages and the files view.
- Stronger workspace isolation: a VM option and sealed previews Workspaces get an extra system call filter, a new VM isolation class for untrusted code, and previews that can no longer reach your ZeroLog account. Introduces dedicated VM isolation classes, tighter system call filters, and origin-isolated website previews.
- ZeroLog Design: designs from any model, with versions and point-and-change Any model you pick in ZeroLog can now create logos, icons, mockups, landing pages and React components. Each design renders next to the chat, keeps its versions, and can be changed by clicking the part you mean. Enables design creation from any model with interactive point-and-edit, version history, and React component rendering.
- 5 October: live design drawing, longer chat answers, search brand data The design panel draws files while the AI writes them, and chats allow longer answers.
- /design now lets the AI in your chat do the design work The AI in your chat now designs websites, logos and banners itself and uses the design engine to build, screenshot and check its work. A preview opens next to the chat. Switches the /design command to let the active chat AI create designs directly using integrated build and screenshot tools.
- 4 October: Business page, investors page, model picker Companies can manage members, and the model picker shows measured test results.
- 4 October: Infomaniak image engine, design command repair, privacy policy 1.8 A separate image engine creates new images with Flux schnell and is paid from your ZeroLog balance. The Design Engine stays at HTML, inline SVG and CSS.
- Design Engine: /design repariert und KI-Instruktionen aktualisiert A doubled npm path blocked the design build. The fix was tested in a real isolated container. (German original below.)
- Neue Bilder mit Infomaniak: Galerie und KI-Werkzeuge A separate image engine creates new images with Flux schnell, paid from your ZeroLog balance. The Design Engine stays with HTML, SVG and CSS. (German original below.)
- Design Engine ohne Bildgenerierung The Design Engine uses HTML, inline SVG and CSS. The former image store stays deleted; new images come only from the separate Infomaniak engine. (German original below.)
- Full Featherless catalogue and context-first search The model catalogue now includes the full public Featherless listing, with filters for context, price, popularity, downloads and model type. Indexes the full public Featherless catalogue of over 51,000 models with sorting by context window, price, and tags.
- Malware checks across ZeroLog workspaces Local malware checks cover regular and anonymous workspaces. Existing Windows VMs still need protection verified inside each guest. Expands local malware checks; protection inside Windows VMs still needs separate verification.
- 3 October: model views, site builder budget, system mail Customer model views are curated, the site builder stops at its budget, and system mail has a fallback route.
- 3 October: sign-in and account page changes Sign-in goes straight to the Keycloak login, and several account page and passkey issues were fixed.
- 1 October: homepage wording and account page fixes The homepage uses new wording, and the account page was restyled and fixed for small screens.
- Background catalogue refresh and faster model search Model search now uses the local catalogue. Public API checks completed in about 65 to 159 milliseconds after the latest update. Speeds up model catalogue search using local caching and cancellation of outdated requests.
- What changed on 1 October Documentation for agent goals, approvals, and background jobs was clarified. Clarifies agent goal and approval documentation, bounds terminal chat context, and saves plans incrementally in the experimental site builder.
- Trust and security, in one place A new documentation page brings together who operates ZeroLog, where workspace data is stored, and which services receive data.
- 29 September: agents page and site builder fixes A new page describes ZeroLog agents. The site builder removes made-up image sources.
- Faster public pages and steadier site builds Public pages such as the home page, pricing, docs and the Newsroom are now served from a cache close to you, so they load faster. Adds edge caching for public pages, asset versioning, and clearer errors when reasoning models exceed token limits.
- Markdown pages, the full model catalogue and a default model Public pages now have Markdown versions and a rebuilt llms.txt, the model list covers the full Featherless catalogue, and new chats get a default model picked from measured tests. Provides Markdown representations for public pages, updates llms.txt, and sets GLM-5.3-Flash as the default chat model.
- 28 September: site and documentation updates Public pages have clearer titles and descriptions, the Paperclip pages were removed from ZeroLog, and several guides were updated.
- 28 September: billing during the provider pause Paid Stripe billing is paused while customer inference through Featherless is paused. This entry says what changes for subscriptions and invoices.
- Updates to the Android app and site builder ZeroLog for Android now sends push notifications without Google services. Free page blocks also get a TypeScript check before they are saved. Enables Google-independent Android push notifications and adds TypeScript checks for custom page blocks in the site builder.
- Crash reports, anonymous chat, push settings and custom pages ZeroLog Android now sends anonymous crash reports. This update also covers anonymous chats, push settings and custom site blocks. Introduces anonymous Android crash reporting, clarifies anonymous chat storage separation, and improves push notification persistence.
- Security updates for request handling and admin mail settings We closed a known weakness in how zerolog.ch reads incoming requests, narrowed who can open the admin alert mail settings and tightened the waitlist pages. You do not need to do anything. Routine server library patch addressing request parsing and restricting admin alert mailbox credential access.
- Featherless data handling and a temporary customer pause Customer inference through Featherless is paused while ZeroLog completes its data protection agreements and confirms resale rights; accounts, credits and saved conversations remain in place. Announces a temporary customer inference pause on Featherless pending revised data agreements and resale confirmations while keeping balances safe.
- 27 September: billing pause, provider pause and documentation corrections Paid billing can be paused during a service suspension. Customer model access through Featherless is paused.
- Security signals from sandboxes, filtered before storage ZeroLog now records security signals from its sandbox protections. Detection and alerts are on; automatic countermeasures stay off until they have been validated.
- Long-running replies no longer get cut off early Chat replies that run a long command or wait for your approval were sometimes stopped too soon. The waiting limits now depend on what the reply is doing. Increases chat timeouts for long workspace commands and thinking models to avoid premature disconnects.
- A workspace that stops mid-copy no longer crashes the server If your workspace stopped or restarted while files were being copied into it, the server process could crash. That no longer happens. A stopped workspace now fails its sync instead of crashing the server; related gateway errors are also addressed.
- Model access, Builder checks and event diagnostics Features now use the models your account can see. Builder checks tool support before queuing jobs, and remote event diagnostics no longer include event content. Automatic choices follow your permitted models; unavailable selections fail clearly and Builder checks tool support before starting.
- Notifications for finished replies, low credit and new sign-ins You can now be notified when a reply finishes while you are away, when your credit runs low, and when your account is signed in from somewhere new. Settings now control alerts for completed replies, low credit and unfamiliar sign-ins; notification text excludes chat content.
- Anonymous chats get their own store Encrypted messages from anonymous chats are no longer kept in the main database. Anonymous messages are stored separately; storage and deletion failures are visible and never fall back silently.
- Terms of Service 1.3: one inference provider This notice also explains what happens when a workspace stops during Auto-Sync or a security scan. Terms and privacy versions change provider rules and notice dates; existing accounts have an explicit acceptance/deletion deadline.
- 26 September: privacy policy 1.4.1 to 1.6 (crash reports, push notifications, DPF dates) The privacy policy now describes error and crash reports and push notifications, and updates the Data Privacy Framework dates.
- 25 September: waitlist and preview requests ZeroLog has a public waitlist and a preview request form. Both use double opt-in.
- Terminal API: calls without streaming reach their model again Requests to a prefixed model without streaming ended in a bare 502. They now reach their provider, errors keep their real status, and a header switches rerouting off. Non-streaming terminal calls reach their provider again, retain meaningful error status and can explicitly disable rerouting.
- Android 1.20.2: a frame shows when the agent is working While the agent works, a black frame now runs around the whole screen, so a long pause to think no longer looks like the agent has stopped. Adds a visual indicator frame during agent runs on Android and fixes input field targeting.
- 24 September: security hardening for previews, sign-in and WebDAV A set of security fixes went live on 24 September. The old standalone builder console was removed.
- Android 1.20: the agent operates your apps without missing a tap We ran the same 20 phone tasks until two runs in a row went through with no failed tap and under 10 seconds of tool time each. The APK downloads now require a signed-in account. Improves Android tap reliability and tool timing, and requires an account to download the APK.
- Android 1.19.7, tested from download to Claude Code on a fresh phone We installed ZeroLog on a phone that had never seen it and went through every step: download, pairing, Termux, signing in to Claude Code and Antigravity, and a phone tool run by Claude Code. Fixes fresh phone onboarding, pairing expiration, and Termux setup guidance on Android.
- Commands in containers lost their output for twelve days Since 11 September, a command in a container that took longer than half a second came back empty and marked as successful. It is fixed, and a failed stream can no longer look like success. Resolves silent command output loss and file truncation in containers, and adds action checks on Android.
- Claude Code, Antigravity and Codex on your phone Version 1.19.0 runs the official command-line agents in Termux, signs you in through their own pages and gives them the phone's tools. The app also looks like zerolog.ch now. Runs Claude Code, Antigravity, and Codex directly on Android via Termux with device tools.
- One ZeroLog app for Android, and sign-ins it leaves alone The web app and the agent app are now one app with two tabs. Version 1.18.0 also stops handling sign-in codes for command-line tools. It opens the page and steps aside. Merges web chat and agent modes into one unified Android app and separates CLI sign-in handling.
- /goal keeps the chat working, /ultracode shows its agents /goal now works like the hook in Claude Code: after each answer a checker decides whether the goal is met, and the chat carries on until it is. Ultracode lists every agent in the chat. Introduces autonomous /goal condition loops and the /ultracode multi-agent task delegation switch.
- ZeroCode for Android 1.17.1: tools ask first and fail honestly The app now asks before a tool changes something on your phone, keeps the AI out of its own settings, and no longer reports container commands that never ran. Requires user approval for state-changing phone tools and shields app storage from file tools.
- Your phone's tools reach the model, and paid models fall back to free ones The Android app's tools now reach the model, ZeroLog Free runs turns with tools, and a paid model without credit falls back until one answers. Connects phone tools to models, adds automated fallback routing to free models, and fixes container freezes.
- ZeroCode for Android 1.17: Browser navigation and app discovery ZeroCode for Android 1.17 adds direct browser tools, real-time app discovery, local APK installation, and automatic tool call fallback execution for open-source models. Adds browser, package management, and APK installation tools alongside resilient tool call parsing on Android.
- ZeroCode for Android 1.16: Split-brain routing and vault security ZeroCode for Android 1.16 introduces split-brain execution, a hardware-backed credential vault, visual set-of-mark navigation, and comprehensive permission onboarding. Introduces split-brain mobile routing, a hardware-backed unlock vault, and visual Set-of-Mark navigation.
- ZeroCode for Android released ZeroCode for Android brings autonomous coding and local Python execution to mobile devices without root. Launches the native ZeroCode Android app with embedded local Python execution and UI automation.
- Documentation expanded with four core systems The documentation registry now covers the website builder, the design engine, the terminal client, and live web grounding. Documents four platform systems: website builder, design engine, terminal client, and web search.
- Configurable design critic and large site builds The design critic loop is now configurable up to 20 rounds per account, and the file writer streams large site generation batches by byte volume. Allows configuring design critic iterations up to 20 rounds and fixes buffer limits on large exports.
- Android and Termux without manual setup The installer detects Termux on Android, configures the compatibility environment automatically, and creates wrappers so you can run the client directly. Automates Termux environment configuration and creates CLI wrappers on Android.
- Workspace sync and payload chunking Workspace synchronisation wakes sleeping containers on demand, prunes cache trees, and splits large payloads to prevent transfer stalls. Wakes sleeping containers during sync, ignores cache folders, and streams uploads in 4 MB chunks.
- Self-hosted releases and verified updates Zerocode upgrades pull directly from the host now, verify their checksum before installing, and replace the running binary on Windows without permission errors. Pulls CLI updates directly from the host with checksum checks and fixes in-place Windows binary replacement.
- The terminal mirrors into the web chat The terminal client mirrors its runs into the web chat in real time, and what you write in the web goes back to the terminal. Links terminal client sessions live to web chat with bidirectional message and model synchronisation.
- Sessions, failover, and a full disk Terminal sessions appear as chats and come back when you reopen them, failover reacts to network failures, and the design engine builds again. Mirrors terminal sessions into account history, improves provider failover on network drops, and fixes disk leaks.
- The chat shows its work Tool calls, reasoning and files render as cards in the stored history, anonymous error telemetry runs, and the installed app carries our own icon. Renders tool calls, reasoning, and files as structured cards in chat history, and adds error telemetry.
- The model can ask you something A question from the model is a card in the chat now, and your answer goes back into the turn that asked it instead of the one after. Renders model clarification questions as interactive cards and routes answers directly into the active turn.
- The design engine, first stage A brief becomes an interface that is generated, built in your container, measured and scored, with a preview address for every version. Launches the design engine to generate, build, test, and preview UI designs from briefs.
- One mark, one colour The ZeroLog mark is white on black everywhere, the fan-out command finally exists in the chat, and research fetches feed an index of our own. Updates to a monochrome brand mark, exposes the /ultrasite command in chat, and indexes research pages.
- Ten rounds for the design critic The site builder runs its design critic up to ten times per page, keeps polishing in the background, and lets each account set the number. Expands design critic evaluation up to ten rounds with background polishing and fixes large build crashes.
- The terminal client gets its own door The command line client talks to an endpoint of its own now, with its own token, and ZeroLog no longer reads the credential your own agent uses. Introduces dedicated /api/cli endpoint with token authentication and isolates third-party agent credentials.
- What changed on 9 September The builder checks published sites, terminal setup is documented, and account and research options have changed. Summarises updates to site verification, account data export/deletion, and German legal research.
- What changed on 8 September The terminal client has setup instructions, workspace drives take fewer steps, and settings are easier to use. Summarises terminal pairing guides, simplified network drive mounting, and reorganized settings.
- What changed on 7 September Workspaces are easier to open on Windows and Android, the site builder has more styles, and account protections changed. Introduces network drive mounting, expands site builder styles to 5,008 combinations, and notes registration status.
- 6 September: site builder in chat, chat list tools, model tier fixes The site builder can be started from the chat and gives a preview link you can send. Several chat and model-routing faults were fixed.
- What changed on 4 September We corrected an overbroad data-retention statement and removed the 10% fee on credit top-ups. Removes the 10% credit top-up surcharge and clarifies the exact zero-data-retention scope in the privacy policy.
- The contract said no markup. It was 2%. The price you were shown always included the margin. The terms said the opposite. Nothing about what you pay changed, only what we tell you about it. Corrects terms to disclose the 2% price margin, updates China provider routing rules, and clarifies legal terms.
- Twelve more model providers, and where your prompt goes New providers mean new places a prompt can land. Each is named in the privacy policy with its country and legal basis, and one is excluded from automatic failover. Discloses twelve new AI providers in the privacy policy with jurisdictional details and failover routing rules.