# Product changes and model retirement policy

## 2026-08-21

- Published the exact five paid AI endpoints and four free discovery endpoints on the homepage,
  endpoint overview, `llms.txt`, complete agent corpus, sitemap, and portable Agent Skill.
- Deployed and indexed the guarded Flash v2.5/Scribe v2 MP3 speech scope after exact-build dark
  activation, one non-retried provider/storage qualification, and public no-spend parity checks.
  x402scan now resolves all nine public resources; the release automation did not spend USDC.
- Added canonical Base64 JSON input to the existing speech-to-text endpoint while retaining the
  standard multipart upload. Both forms decode and inspect the same bounded MP3 bytes before any
  payment challenge, provider call, or settlement.
- Published the JSON schema and a valid unpaid probe example so JSON-only agent directories can
  verify and list speech to text without adding another public endpoint.

## 2026-08-19

- Prepared the guarded speech catalog with `elevenlabs/flash-v2.5` for MP3 text to speech and
  `elevenlabs/scribe-v2` for MP3 speech to text. Multilingual TTS and every other audio format remain
  unavailable until their qualification gates pass.
- Corrected the generated TTS guide to use the actual `expires_at` response field and added a
  complete multipart STT request example that preserves the body across the unpaid and paid calls.
- Updated OpenAPI, pricing, x402 discovery, the portable Agent Skill, privacy language, and model
  documentation to describe measured speech usage and ElevenLabs' route-specific retention modes.
- Clarified that ambiguous encrypted STT staging becomes inaccessible at its one-hour logical
  expiry, while physical deletion can complete later through Azure storage lifecycle management.

## 2026-08-14

- Matched Gemini 3.1 Flash-Lite Image's fixed-1K Vertex contract by retaining the selected aspect
  ratio but omitting the redundant private provider `imageSize` field. Public requests still select
  and receive a validated 1K image at the same $0.035 promotional total.
- Corrected the private Vertex `generateContent` adapter so image size and aspect ratio use its
  official `generationConfig.imageConfig` fields. The public image endpoint and request format do
  not change.
- Kept the service dark until the corrected immutable build passes one non-retried Flash-Lite
  provider and encrypted-storage qualification. No USDC is used by that qualification.
- Kept text-to-speech in ElevenLabs Zero Retention Mode and changed speech-to-text to the provider's
  standard retained mode after the protected Scribe v2 qualification confirmed that STT ZRM was
  unavailable for the production account. Onchain Router's encrypted STT staging is still deleted
  after a definite result, while ElevenLabs may retain audio and transcripts under its own policy.
- Kept every speech model and voice dark until the revised adapter passes one new non-retried
  qualification and the remaining media, privacy, and release gates are complete.

## 2026-08-13

- Selected `gemini-3.1-flash-lite-image` as the guarded Base-mainnet image model at 1K/1:1 after
  the newer immutable Flash Image builds failed returned-aspect validation. The endpoint remains
  `POST /v1/images/generations`; Flash Image and Pro Image remain dark.
- Set the promotional successful-image total to $0.035: $0.034 catalog-fixed provider image price
  plus the existing $0.001 successful-call fee and 0% service fee.
- Kept the public service dark until this exact Flash-Lite build passes its one-shot provider and
  encrypted-storage qualification. That qualification uses provider credit and no USDC.

## 2026-08-12

- Added provider-neutral `POST /v1/images/generations` with the first Gemini image model, one
  1024×1024 image per request, OpenAI-compatible URL or Base64 delivery, and a fixed $0.068
  successful-call price during the 0% service fee launch promotion.
- Added repository support for model-specific `image_size` and `aspect_ratio`, with 1K/1:1
  defaults and exact integer price tiers. Additional Flash specifications plus Gemini 3.1
  Flash-Lite Image and Gemini 3 Pro Image are enabled only for non-production qualification; the
  Base mainnet catalog remains on its approved Flash 1K/1:1 route until expansion gates pass.
- Added private AES-256-GCM encrypted image storage and capability URLs. Every response reports
  `url_retention_days: 7` and the exact `url_expires_at`; URLs stop serving at expiration and Azure
  lifecycle management deletes the encrypted object after seven days.
- Preserved the financial ordering for images: payment authorization is verified and durable before
  generation, while settlement occurs only after the image and result are durable. Known failed
  generations are not charged.
- Updated the durable product description from an LLM-only router to an AI model router so the brand
  remains stable as image, video, and audio capabilities are added.
- Curated the public agent endpoint showcase to OpenAI-compatible Chat Completions, Anthropic-compatible Messages, categorized Models, detailed Pricing, and a Base USDC Balance lookup. Operational and private support routes remain functional but are no longer presented as separate products.
- Organized `/v1/models` around available capability categories and endpoint compatibility. Text and
  image generation are now available; video, speech-to-text, and text-to-speech categories will
  appear only when those capabilities are released.
- Added a readable unpaid-402 JSON explanation while retaining the official `PAYMENT-REQUIRED` header as the authoritative payment challenge.
- Corrected Bazaar discovery identity so each paid challenge names the canonical public Onchain Router endpoint instead of the private Azure API hostname. This does not change payment amounts or settlement behavior.
- Corrected Base mainnet payment persistence for the official x402 Permit2 `upto` payload emitted by the wallet client. The authorization nonce is now durable before any model request is sent.
- Improved the wallet test page's phase-specific errors for nested wallet rejections, payment-persistence failures, and uncertain settlement. Server traces now include only a safe failure category, never signatures, payment payloads, prompts, or completions.
- Activated a catalog-versioned 0% service fee launch promotion across production billing, pricing pages, endpoint descriptions, OpenAPI, model discovery, quotes, and receipts.
- Corrected discovery's minimum successful price to include both the $0.001 minimum usage charge and the separate $0.001 fixed successful-call fee.
- Simplified the local production buyer so it connects directly to the public endpoint without the retired dark-release canary credential.
- Kept each request's signed spending limit and truthful dynamic discovery range. The final charge still uses measured usage and never exceeds the amount authorized by the buyer.

## 2026-08-11

- Made the durable product identity provider-neutral: Onchain Router is now described as the x402-native LLM router, while Gemini remains clearly identified as the current MVP catalog rather than the brand itself.
- Published the progressive-branch mark through root favicon, manifest, Open Graph, Twitter, and OpenAPI logo metadata so discovery directories and social previews can resolve the intended logo.
- Declared explicit OpenAPI auth modes for public, receipt-protected, and x402-paid operations so x402scan can register supporting resources without treating free endpoints as broken paywalls.
- Simplified every customer-facing payment reference to Base mainnet and USDC, removing internal-network explanations, redundant payment-value wording, and the pre-launch unavailability notice.
- Reworked the website into a wider editorial layout that uses large screens more effectively.
- Reduced heading sizes across the home page, documentation, model catalog, pricing, status, and legal pages.
- Replaced the operating-system font fallbacks with a self-hosted Plus Jakarta Sans variable font and a sharper, more consistent weight system across the public site.
- Applied the same font to the wordmark, navigation, and Base Mainnet label, and refreshed search as a modern command palette.
- Added content-versioned stylesheet and script URLs so a browser cannot combine updated page markup with stale interface styles.
- Replaced the temporary letter tile with the selected progressive-branch logo, representing one interface expanding into multiple onchain capabilities, and added a matching favicon asset.
- Rewrote page titles, descriptions, navigation labels, and introductory copy in clearer language. Technical abbreviations are now explained on first use when the surrounding page is intended for a broad reader.
- Expanded `llms-full.txt` into a one-request package containing the product overview, every guide, generated endpoint references, the model catalog, service status, legal drafts, and portable Agent Skill references. Added HTML discovery links and an XML sitemap so agents can find these surfaces without guessing paths.
- Added local browser checks for wide desktop, laptop, tablet, and mobile layouts. This local review does not publish or activate the paid service.

## 2026-08-10

- Published the first custom single-origin website and documentation build.
- Added HTML, per-page Markdown, `llms.txt`, `llms-full.txt`, OpenAPI, sanitized catalog, and Agent Skill surfaces.
- Set the current paid-inference minimum to `1000` atomic USDC (`0.001000` USDC).
- Qualified the initial Gemini text candidates before selecting the production catalog.
- Added explicit handling for reasoning-token output ceilings, empty visible responses, actual settlement, and durable receipts.
- Published the Base mainnet public-alpha contract using USDC, an authoritative per-request cap, and a global conservative estimated-loss breaker. Hourly and daily payer caps were later removed by ADR-024.
- Removed payer registration and payer allowlisting; every facilitator-verified wallet may purchase under the same limits.
- Kept automated payment conformance fixtures outside the documented production environment.
- Approved seven GA Gemini text aliases for mainnet-alpha routing. The `gemini-3.1-pro-preview` route remains disabled on mainnet.
- Added fail-closed production configuration, a one-origin site/API deployment, public per-receipt
  capabilities, a least-privilege provider federation role, and a separately approved production
  infrastructure workflow. Synthetic reconciliation is now forbidden in production.
- Revalidated the public catalog against current Google model and pricing sources, including the
  65,536-token output limit for `gemini-3.1-flash-lite`.
- Expanded the privacy and service-terms release candidates and added automated checks for stale
  test/private-alpha language, operator-only configuration, enabled-model count, and legal sections.

## Deprecation policy

Model aliases can change only through an immutable catalog version. A retiring model shows its retirement date in `/v1/models` and `/models`. The service does not silently map an alias to a more expensive tier.

Clients should discover models rather than hard-code them indefinitely. Before each deployment and periodically during long-running sessions, refresh the catalog and reject an alias that is unavailable, past retirement, or outside the caller's model allowlist.

The Gemini 2.5 compatibility routes have a conservative operational removal date of 2026-10-16. `gemini-3.1-pro-preview` is a testing-only preview and cannot become a production default without a new approved catalog and provider gate.