v3.12.0

Released October 27, 2026

Adds member‑role management, extends real‑time automatic token increases to training, and includes several security and reliability fixes.

Confirming this release. A new Member Roles screen appears in the admin and superadmin consoles, the Agent Builder lists all of your agents and workflows, and remote images in chat now show a Load image prompt instead of loading automatically. Some capabilities are enabled per deployment — confirm availability with your Ask Sage administrator.

🚀 New capability

Member role management. Administrators can now set an organization’s default role for new members and change many members’ roles at once — with an undo — from a new Member Roles screen in both the admin and superadmin consoles.

⚡ Improvements & fixes

Real‑time automatic increases for training tokens. The token‑allocation policy’s automatic‑increase trigger now applies to training (embedding) usage in real time — an increase takes effect as soon as usage reaches the configured trigger, instead of waiting for the hourly cycle. This matches the behavior already in place for chat (inference) tokens.
More accurate Super Admin statistics. The Users count now reflects the organization’s total account count, and the paid‑accounts figure is labeled clearly.
More reliable token‑availability checks. Resolved a condition where heavy activity‑log queries could consume excess database resources and cause intermittent “token service temporarily unavailable” errors.
Agent Builder lists everything. The Agent Builder page now lists all of your agents and workflows instead of only the first 50, and includes fixes to saving agents and to how node values display.
Admin interface fixes. Removed a duplicate “MCP Status” entry, and the Activity Log now loads reliably right after a new version is deployed (no manual refresh needed).

🛡️ Security & vulnerability remediation

Remote images in chat no longer load automatically. To reduce tracking and privacy risks, remote images in messages are now load‑on‑request — you choose when to load them. Embedded (inline) images still display normally.
Security and dependency updates. Components were updated to clear recently disclosed vulnerabilities — including refreshed certificate trust — as part of Ask Sage’s continuous‑monitoring commitment.

🔒 Security & platform

Ask Sage services are delivered as FIPS‑hardened, digest‑pinned, and cosign‑signed images within the FedRAMP Class D authorization boundary, and are continuously rebuilt against the latest patched base images as part of Ask Sage’s continuous‑monitoring commitment.