OPAQUE 2.7.0¶

April 7, 2026

Thanks for using OPAQUE. This release introduces production-ready attested networking, improved workspace and workflow productivity, and enhanced transparency across agentic workflows—making it easier to deploy, manage, and trust AI systems at scale.

New features and enhancements¶

• aTLS v2 and upgradeability: Production-ready attested networking with improved stability and backward-compatible upgrades, making it easier to deploy and evolve secure systems without disruption.
• Expanded observability and transparency: Attestation reports now include visibility into external endpoints accessed by workflows, helping teams understand where data is going and what systems are involved. This improves auditability and supports stronger governance for multi-system, agentic workflows.
• Streamlined workspace access and user management: Workspace management is now fully mutable, allowing users to be added and removed at any time. The previous invite flow has been removed, eliminating blockers such as pending invitations. This makes it easier to manage users as they join and leave your organization, while supporting flexible, role-based access and policy control at scale. See Manage workspaces for details.
• Workflow cloning: You can now duplicate workflows within a workspace, making it easier to iterate, experiment, and build on existing workflows without starting from scratch.
• New workflow nodes: Several new nodes expand what you can build within workflows.
  • Neo4j: Connect Neo4j as a data source in workflows, allowing agents to query and reason over relationships in graph-structured data.
  • Retriever nodes for improved search and conversation: New retrievers enhance semantic search and help workflows maintain context across user interactions.
    • HyDE Retriever: Improves search relevance by first generating a hypothetical answer to the user’s question, then using that answer to retrieve more accurate results.
    • Multi-query Retriever: Rephrases a query into multiple variations, retrieves results for each, and ranks them to improve coverage and accuracy.
    • Smart Retriever: Dynamically selects and combines retrieval strategies (including HyDE and multi-query) based on the query, optimizing both relevance and result volume.
• Simplified sign-in experience: Logging in is now easier; users no longer need a passkey alongside Okta credentials, removing a common point of friction.
• New CLI-based installation: A new CLI installer replaces the Azure Marketplace managed app, providing a more reliable, restartable installation experience with built-in logging for easier setup and troubleshooting.

Fixed issues¶

• Attestation report generation no longer fails under high load when the header is enabled. This resolves a race condition that could occur with concurrent requests.
• Workflows no longer display a running status before they are ready for execution.

Known issues¶