When packaging a protected artifact without a signed-in session, the error now points at $MAGICLOCK_TOKEN on machines with no terminal — CI, containers, build agents — instead of telling you to run an interactive command that cannot run there.

Cloud-controlled artifacts: an offline approval that cannot be tied to the machine running it is now refused rather than honored, so a cached approval copied to another machine no longer buys it offline grace. Machines that identify normally are unaffected, and any machine that can reach the network keeps running exactly as before.

Issuing a license with hand-written terms is now reserved to us. Your account keeps receiving licenses automatically from the plan you bought, with every term derived from that plan — so no one can mint themselves terms their plan does not include.

Payments: an incoming payment notification is now confirmed directly with the payment provider before an order is fulfilled, so a forged notification alone can no longer unlock a paid plan.

Out-of-range paging values on list endpoints are now corrected automatically instead of failing the request with a server error.

Long-running steps — native compilation and model encryption — now show a live status line with a spinner and elapsed time. Logs and CI environments automatically get clean plain-text output instead.

When the compile backend is missing, the error now points at installing just the backend itself — no more advice that could reinstall or upgrade magiclock on an activated machine.

The bundled AI-assistant skill (magiclock skill) was rewritten around the protection-tier × binding model, so coding agents guide you accurately under the portable-by-default semantics.

The site summary for AI answer engines (llms.txt) and the homepage demo now state the current binding behavior exactly.

Portal switches for cloud-controlled artifacts now take effect within about a minute.

Removing a device seat now immediately revokes its activation credential — a removed machine can no longer reactivate itself with a leftover token.

magiclock activate no longer misreads a fresh interactive login as a stale session, and build --emit-key/--passphrase without --model now fails with a clear message instead of silently doing nothing.

The compiled tier's license gate was hardened: binaries are bound to the seat that built them, portable compiles carry no gate by design, and running on the wrong machine reports a clear error.

French — the sixth language across the product: website, portals, CLI messages, and docs.

Your account language preference now follows you everywhere: the portal and localized CLI output.

A full code-security audit round: all 52 findings fixed.

Windows 11 verified end to end; platform coverage: macOS (Apple silicon), Windows, Linux — Python 3.9–3.14.

Code encryption (protect), model encryption sealed per device, machine binding, fully offline verification and decryption, a cloud-controlled kill switch, and a 48-hour free trial.