Skip to main content
Use the RSS button above, or subscribe to https://docs.redpill.ai/changelog/rss.xml, to get new entries, including advance notice of gateway measurement changes. Filter by the Measurements tag for changes to attested values.
​
Measurements
Advance notice for gateway measurement changes
  • At least 3 days before a gateway rollout that changes a value clients pin, a gateway-prod-<date> prerelease in Dstack-TEE/private-ai-gateway publishes the new values. KMS values (mr-kms) are set by the KMS operator and are published when they change.
  • Pin the KMS root key rather than mr-kms: a replica records mr-kms when it boots, so it can change on any restart after a KMS change.
  • Release measurements lists the values live now and the exceptions.
​
MeasurementsGateway
Gateway release gateway-prod-2026-11-03
  • Gateway release gateway-prod-2026-11-03 (source 77fac126) rolled out to all replicas, finishing at 17:10 PST. This release was not announced in advance. Values that changed:
    • compose hash: f9c6a938bf10c9674d665d0a3327732f206e59411ac9dca4ae175ae18ef4d113 (was aa767dbc886174737fcc77083851e3dbdea093b976404755a3f5a68c0d9e7992);
    • KMS measurement (mr-kms): 5039840b94d9891852228ae8d5ef8c3ad825c8ca11c18533f19fd8a4de45890c.
  • mr-kms did not change because of the gateway code. Each replica records it from the KMS when it boots; the rollout restarted every replica after the KMS had changed since their previous boot.
  • The OS image, KMS root key, and TLS keys did not change.
  • The workload keyset now renews about 15 days after each deploy, which changes workload_keyset_digest; do not pin that value.
​
Private AI ProxyAccount
Private AI Proxy 0.1.4, standalone CLI install, account MCP server
  • Private AI Proxy 0.1.4: Linux desktop and CLI builds run on glibc 2.35 and newer again (Ubuntu 22.04, Debian 12). Release notes.
  • The CLI installs on its own: curl -fsSL https://redpill.ai/private-ai-proxy/install.sh | sh, Homebrew tap dstack-tee/private-ai, or npm install --global private-ai-proxy. See Private AI Proxy.
  • Account MCP server at https://service.redpill.ai/mcp: agents read models, balance, keys, workspaces, and usage, and make confirmed changes to keys and workspaces. See MCP server.
  • redpill.ai redesigned around two paths, Build with the API and Use in agents, with stable download links at redpill.ai/download/private-ai-proxy/<platform>.