# Identity Mesh — July 27, 2026 **Release Date**: July 27, 2026\ **Release Type**: Mixed (New Features, Improvements, Bug Fixes) ------------------------------------------------------------------------ ## Overview This release delivers three features, one improvement, and two bug fixes: - **PQC Readiness workspace** — a fourth ready-made persona workspace joins Executive View, Audit & Compliance, and Security Operations, composing your post-quantum readiness view in one click. - **Post-quantum readiness widgets on live tenant data** — the crypto readiness widgets now read directly from your own asset and certificate data. - **Risk rule templates in the admin console** — administrators can review the risk, control, compliance, and reconciliation templates in force and turn individual templates on or off without a service restart. It also adds a **timeline view of asset update history**, and fixes two interaction problems in Generative UI workspaces. ------------------------------------------------------------------------ ## New features ### PQC Readiness workspace [Generative UI](/docs/user-guide/generative-ui) offers ready-made **persona workspaces** so you can start from a composed view instead of a blank canvas. This release adds a fourth: **PQC Readiness**, alongside Executive View, Audit & Compliance, and Security Operations. **What changed:** - A **PQC Readiness** chip appears with the other persona chips on a new workspace. Selecting it composes the post-quantum readiness view immediately. - Like the other persona workspaces, it composes the same set of widgets every time, so the view is repeatable and two people who open it see the same numbers. - You can still reach the same view by describing it in your own words, and you can add or remove widgets afterward like any other workspace. **Why it matters:** post-quantum readiness is a standing program, not a one-off question. A persona chip makes it a single click rather than a prompt you have to compose and re-compose. ------------------------------------------------------------------------ ### Post-quantum readiness widgets on live tenant data The widgets in the PQC Readiness workspace now render your own crypto posture, each bound to a live data source rather than illustrative placeholder content. **What changed:** - **Estimated assets in scope** reports your total in-scope asset count with a breakdown across software, crypto, and machine assets. Each segment drills into the matching asset list. - **Ownership & Orphan Assets** plots your crypto assets across ownership and governance so unowned and orphaned assets are visible as a group rather than one row at a time. - **Fixable now** lists the certificates expiring within the next 30 days, by issue and count — the work that can be closed out immediately. - **Top 10 Assets to Address** ranks the individual assets with the largest contribution to your post-quantum exposure. **Why it matters:** these widgets can now be used to make decisions. The numbers reconcile with the asset lists and the classic dashboards, so a figure you take into a program review is your figure. **Note:** the **Algorithm Posture Matrix** widget is not part of this workspace yet and is planned for a future release. ------------------------------------------------------------------------ ### Risk rule templates in the admin console Administrators can now see the risk rule templates that govern how Mesh evaluates risk, and control which ones are active. **What changed:** - A **Templates** console lists the templates in force, searchable and paginated, grouped by kind — risk, risk controls, compliance, and reconciliation — with each template's severity shown. - Individual templates can be enabled or disabled, and the change takes effect without a service restart. - Axiad ships and maintains a system library of templates. Changing one for your organization creates an organization-scoped override, so your changes never affect another organization and the underlying Axiad library stays intact. - Templates in the system library cannot be deleted, so a disable is always reversible. **Why it matters:** which risk rules are in force becomes visible and adjustable, instead of a fixed platform behavior. If a rule does not fit how your organization works, it can be turned off without waiting on a release. ------------------------------------------------------------------------ ## Improvements ### Asset update history timeline The asset details page now presents an asset's update history as a timeline, so changes to an asset are visible in chronological order with the time each change was recorded. Previously this history was harder to follow when an asset had changed several times. **Why it matters:** when an asset's risk or ownership has moved, the timeline shows when it moved — useful when reconstructing what a source system reported and when. ------------------------------------------------------------------------ ## Bug fixes ### Daily Briefing action buttons no longer act twice On a **Needs attention** item in the [Daily Briefing](/docs/user-guide/generative-ui), the action button is designed to prefill the workspace chat with a suggested follow-up for you to review and send. Instead, the prompt was being sent on its own, and then selecting **Approve** opened a second conversation. **What changed:** - The action button now only prefills the chat. Nothing is sent until you send it. - Selecting the action once produces one conversation, not two. **Why it matters:** the briefing hands off to you and waits, as intended — you stay in control of what gets asked and when. ------------------------------------------------------------------------ ### Identity blast radius drill-in now loads Drilling into an identity's blast radius from a workspace widget failed with a "Couldn't load blast radius" message instead of opening the detail view. **What changed:** - The blast radius drill-in now opens and renders its detail widgets normally. **Why it matters:** blast radius is how Mesh expresses what else is exposed when one identity is compromised. Restoring the drill-in restores that path from a summary widget through to the affected identities. ------------------------------------------------------------------------ This release also includes reliability, performance, and platform maintenance improvements with no user-visible changes.