Identity Mesh — July 27, 2026
Release Date: July 27, 2026
Release Type: Mixed (New Features, Improvements, Bug Fixes)
Overview
This release delivers three features, one improvement, and two bug fixes:
-
PQC Readiness workspace — a fourth ready-made persona workspace joins Executive View, Audit & Compliance, and Security Operations, composing your post-quantum readiness view in one click.
-
Post-quantum readiness widgets on live tenant data — the crypto readiness widgets now read directly from your own asset and certificate data.
-
Risk rule templates in the admin console — administrators can review the risk, control, compliance, and reconciliation templates in force and turn individual templates on or off without a service restart.
It also adds a timeline view of asset update history, and fixes two interaction problems in Generative UI workspaces.
New features
PQC Readiness workspace
Generative UI offers ready-made persona workspaces so you can start from a composed view instead of a blank canvas. This release adds a fourth: PQC Readiness, alongside Executive View, Audit & Compliance, and Security Operations.
What changed:
-
A PQC Readiness chip appears with the other persona chips on a new workspace. Selecting it composes the post-quantum readiness view immediately.
-
Like the other persona workspaces, it composes the same set of widgets every time, so the view is repeatable and two people who open it see the same numbers.
-
You can still reach the same view by describing it in your own words, and you can add or remove widgets afterward like any other workspace.
Why it matters: post-quantum readiness is a standing program, not a one-off question. A persona chip makes it a single click rather than a prompt you have to compose and re-compose.
Post-quantum readiness widgets on live tenant data
The widgets in the PQC Readiness workspace now render your own crypto posture, each bound to a live data source rather than illustrative placeholder content.
What changed:
-
Estimated assets in scope reports your total in-scope asset count with a breakdown across software, crypto, and machine assets. Each segment drills into the matching asset list.
-
Ownership & Orphan Assets plots your crypto assets across ownership and governance so unowned and orphaned assets are visible as a group rather than one row at a time.
-
Fixable now lists the certificates expiring within the next 30 days, by issue and count — the work that can be closed out immediately.
-
Top 10 Assets to Address ranks the individual assets with the largest contribution to your post-quantum exposure.
Why it matters: these widgets can now be used to make decisions. The numbers reconcile with the asset lists and the classic dashboards, so a figure you take into a program review is your figure.
Note: the Algorithm Posture Matrix widget is not part of this workspace yet and is planned for a future release.
Risk rule templates in the admin console
Administrators can now see the risk rule templates that govern how Mesh evaluates risk, and control which ones are active.
What changed:
-
A Templates console lists the templates in force, searchable and paginated, grouped by kind — risk, risk controls, compliance, and reconciliation — with each template's severity shown.
-
Individual templates can be enabled or disabled, and the change takes effect without a service restart.
-
Axiad ships and maintains a system library of templates. Changing one for your organization creates an organization-scoped override, so your changes never affect another organization and the underlying Axiad library stays intact.
-
Templates in the system library cannot be deleted, so a disable is always reversible.
Why it matters: which risk rules are in force becomes visible and adjustable, instead of a fixed platform behavior. If a rule does not fit how your organization works, it can be turned off without waiting on a release.
Improvements
Asset update history timeline
The asset details page now presents an asset's update history as a timeline, so changes to an asset are visible in chronological order with the time each change was recorded. Previously this history was harder to follow when an asset had changed several times.
Why it matters: when an asset's risk or ownership has moved, the timeline shows when it moved — useful when reconstructing what a source system reported and when.
Bug fixes
Daily Briefing action buttons no longer act twice
On a Needs attention item in the Daily Briefing, the action button is designed to prefill the workspace chat with a suggested follow-up for you to review and send. Instead, the prompt was being sent on its own, and then selecting Approve opened a second conversation.
What changed:
-
The action button now only prefills the chat. Nothing is sent until you send it.
-
Selecting the action once produces one conversation, not two.
Why it matters: the briefing hands off to you and waits, as intended — you stay in control of what gets asked and when.
Identity blast radius drill-in now loads
Drilling into an identity's blast radius from a workspace widget failed with a "Couldn't load blast radius" message instead of opening the detail view.
What changed:
- The blast radius drill-in now opens and renders its detail widgets normally.
Why it matters: blast radius is how Mesh expresses what else is exposed when one identity is compromised. Restoring the drill-in restores that path from a summary widget through to the affected identities.
This release also includes reliability, performance, and platform maintenance improvements with no user-visible changes.