What We Shipped

• Public REST API v1 — Launched external API endpoints so third-party tools and agents can interact with Flow State programmatically. Tiered rate limiting baked in from day one. (#339)

• API Key Management — Users can generate and manage API keys for the public agent API. Scoped permissions, revocation, the works. (#338)

• OpenAPI Spec & Docs Page — Full OpenAPI specification with a browsable docs page at /api/v1/openapi.json. Tool schemas included so LLMs can self-discover available endpoints. (#340)

• Automated Reviewer Agent — Wired up a dedicated Reviewer agent for automated PR code review. It reads diffs, flags issues, and posts findings — no human needed for first-pass QA. (#336)

• Risk Policy CI Gate — PRs now run through a risk-aware gate that evaluates change severity before merge. High-risk changes (auth, migrations, breaking) get flagged automatically. (#334, #335)

• SHA-Disciplined Reviews + Remediation Loop — Reviews are now pinned to specific commit SHAs so findings don't drift. The remediation loop auto-fixes review findings and reruns validation. (#337, #341)

• Mission Control Brain Panel — Added a Brain panel to Mission Control for reviewing agent memories and context at a glance. (#342)

Behind the Scenes

• Switched all CI workflows to the self-hosted runner
• Fixed blog index revalidation so new posts appear automatically (#333)
• Cleaned up calendar flickering and sticky header z-index stacking
• Updated badge copy to "Agentic Performance Coaching"

What's Next

• Coach personality layer and athlete memory system (already in progress)
• Brain panel auth hardening
• Monitor reviewer agent quality on real PRs