--- title: RiskMandate.ai from its baseline to v1.34.8 date: 2026-09-24 desk: Journalist standfirst: RiskMandate.ai kept a note for every release, 106 of them from 29 June to 24 September 2026. Read in order, they show a site that began as a risk-acceptance pitch and now sells one document, the Agent Behaviour Policy, at four prices. section: back-catalogue sources: - https://riskmandate.ai/versions.md - https://riskmandate.ai/versions/0.1.0.md - https://riskmandate.ai/versions/0.5.0.md - https://riskmandate.ai/versions/0.6.0.md - https://riskmandate.ai/versions/0.11.0.md - https://riskmandate.ai/versions/0.12.0.md - https://riskmandate.ai/versions/1.0.0.md - https://riskmandate.ai/versions/1.1.0.md - https://riskmandate.ai/versions/1.12.0.md - https://riskmandate.ai/versions/1.13.0.md - https://riskmandate.ai/versions/1.19.0.md - https://riskmandate.ai/versions/1.20.0.md - https://riskmandate.ai/versions/1.21.0.md - https://riskmandate.ai/versions/1.22.0.md - https://riskmandate.ai/versions/1.25.0.md - https://riskmandate.ai/versions/1.28.0.md - https://riskmandate.ai/versions/1.29.0.md - https://riskmandate.ai/versions/1.33.0.md - https://riskmandate.ai/versions/1.34.0.md - https://riskmandate.ai/versions/1.34.8.md - src:sites/riskmandate.ai/versions/index.json - https://riskmandate.ai/ - https://riskmandate.ai/pricing.html reviewed_by: reviewed_on: --- RiskMandate.ai publishes a version record: "Every version of the site, newest first." ([version record](https://riskmandate.ai/versions.md)). The copy in this newsroom's snapshot lists 106 releases, from v0.1.0 on 29 June 2026 to v1.34.8 on 24 September 2026 ([version record](https://riskmandate.ai/versions.md)). A later fetch of the site's `versions/index.json` already names v1.34.12, dated 25 September, as the latest, with 110 releases ([index.json](src:sites/riskmandate.ai/versions/index.json)). This piece stops at v1.34.8, the last release whose notes are in the snapshot. Counts are computed from the version record. ## Two eras The first 35 releases, v0.1.0 to v0.14.0, are marked reconstructed ([version record](https://riskmandate.ai/versions.md)). The record explains: "Releases marked **reconstructed** were authored in the SG/Vault the site was published from before v1.0.0; their notes are a record, and the builds they describe are not in this repository." ([version record](https://riskmandate.ai/versions.md)). The other 71, v1.0.0 to v1.34.8, name a git tag as their source ([version record](https://riskmandate.ai/versions.md)). ## June to August: a pitch about risk acceptance v0.1.0 is called "Baseline": "First versioned snapshot of the Risk Mandate marketing site, delivered as an encrypted SG/Vault HTML app." ([v0.1.0](https://riskmandate.ai/versions/0.1.0.md)). Its hero read "Agents act. You own the risk." and its sections included the Lethal Trifecta, Capability Certificates and pricing ([v0.1.0](https://riskmandate.ai/versions/0.1.0.md)). v0.5.0 restructured the site around risk acceptance, with "the signature mechanic: no deny button" ([v0.5.0](https://riskmandate.ai/versions/0.5.0.md)). The same release says a "FedRAMP Ready" claim was scrubbed from all shipped versions, because "a false certification-status claim cannot remain publicly served" ([v0.5.0](https://riskmandate.ai/versions/0.5.0.md)). v0.6.0 made Pricing a page with three tiers, "Community · free, Consumption · token-based, Enterprise · custom", and added RAMM, the Risk Acceptance Maturity Model ([v0.6.0](https://riskmandate.ai/versions/0.6.0.md)). On 20 August v0.11.0 put a new homepage up that "now leads with the gap" between what a credential permits and what its holder is authorised to do ([v0.11.0](https://riskmandate.ai/versions/0.11.0.md)). It states: "we define the mandate and map the gap; we do not enforce it" ([v0.11.0](https://riskmandate.ai/versions/0.11.0.md)). The same release made the brand "RiskMandate, one word" and added a Live demos page with three published vaults ([v0.11.0](https://riskmandate.ai/versions/0.11.0.md)). On 25 August v0.12.0 led instead on insurability, with a sample Insurability Index and a six-level ladder from "L0 Unmapped" to "L5 Underwritten" ([v0.12.0](https://riskmandate.ai/versions/0.12.0.md)). Its note says "The market statistics did not ship", because they could not be sourced ([v0.12.0](https://riskmandate.ai/versions/0.12.0.md)). ## 11 September: the site becomes the repository v1.0.0 is "an exact copy of what that vault was serving at v0.14.0, rewritten to stand on its own" ([v1.0.0](https://riskmandate.ai/versions/1.0.0.md)). Before it, every page sat inside one frame, so "Every page on the site therefore had the same URL" ([v1.0.0](https://riskmandate.ai/versions/1.0.0.md)). The release dropped twelve frozen design snapshots, "about 759KB", and gave each page a canonical URL and a markdown twin ([v1.0.0](https://riskmandate.ai/versions/1.0.0.md)). ## 12 to 15 September: the Agent Behaviour Policy v1.1.0 made the Agent Behaviour Policy a page and added a landing page for the Lisbon Startup Summit on 17 and 18 September ([v1.1.0](https://riskmandate.ai/versions/1.1.0.md)). v1.2.0 opened the Lab, for "findings, interface mockups and open proposals" ([v1.2.0](https://riskmandate.ai/versions/1.2.0.md)). v1.12.0 moved the policy to the front of the homepage, saying "you cannot insure what nobody can describe." ([v1.12.0](https://riskmandate.ai/versions/1.12.0.md)). It marks step one of its ladder as what it sells and the next two as design: "We are on the first, and the page says so." ([v1.12.0](https://riskmandate.ai/versions/1.12.0.md)). v1.13.0 built the first behaviour-policy vault and a directory of nine ([v1.13.0](https://riskmandate.ai/versions/1.13.0.md)). Fourteen releases carry the date 15 September ([version record](https://riskmandate.ai/versions.md)). ## The prices, as the record tells them v1.19.0 says the store at store.sgit.ai put up four levels on 15 September, and lists them as "the pack by email for £5, a working vault for £50, corrected for your situation for £500, two sessions and a professional's signature for £1,500" ([v1.19.0](https://riskmandate.ai/versions/1.19.0.md)). It also records that "two of the four exist and run, two are specified and have never been sold once" ([v1.19.0](https://riskmandate.ai/versions/1.19.0.md)). The record then disagrees with itself about the entry price. v1.20.0 says "Level 1 is also **£5**, not the £10 this site claimed until v1.19.0 removed it." ([v1.20.0](https://riskmandate.ai/versions/1.20.0.md)). v1.22.0, a day later, says "The entry level is **£10** and this site was saying £5 in six places" ([v1.22.0](https://riskmandate.ai/versions/1.22.0.md)). v1.22.0 also removed every price from the site, because the store's published boundary says riskmandate.ai "never runs a cart, holds a price or issues an order reference" ([v1.22.0](https://riskmandate.ai/versions/1.22.0.md)). On 17 September v1.25.0 put the prices back, in a homepage drawn by a business partner, and noted: "This re-opens a boundary the other team wrote down and they should be told." ([v1.25.0](https://riskmandate.ai/versions/1.25.0.md)). ## What it sells now The homepage in the snapshot says: "An Agent Behaviour Policy writes down what one agent can really reach, what you authorised it to do and the gap between the two, in one record the CEO, CTO and CISO can all stand behind." ([home page](https://riskmandate.ai/)). It lists four levels: ABP Pack at £10, ABP Vault at £50, ABP Tailored at £500 and ABP Reviewed at £1,500 ([home page](https://riskmandate.ai/)). It says those prices were "read from [store.sgit.ai/compare](https://store.sgit.ai/compare/) at store v0.3.24 on 17 September 2026" ([home page](https://riskmandate.ai/)). The pricing page is headed "Four levels. One document." and names the same four prices: "The pack, downloaded" at £10, "A working vault" at £50, "Corrected for your situation" at £500, and "Two sessions, and a professional signs it" at £1,500 ([pricing](https://riskmandate.ai/pricing.html)). Its rule is: "Each level is the level below plus exactly one thing, and the one thing is what the price is for." ([pricing](https://riskmandate.ai/pricing.html)). It says of the store's ledger, as copied on 15 September, that "two of the four have never been sold once" ([pricing](https://riskmandate.ai/pricing.html)). The two pages differ in two details. The homepage says "All sixteen published examples are free to read", while the pricing page says "Fifteen applications are in the library" ([home page](https://riskmandate.ai/), [pricing](https://riskmandate.ai/pricing.html)). The homepage describes level 3 as "A named security professional corrects the mandate for your deployment" ([home page](https://riskmandate.ai/)). The pricing page describes it as a prompt the buyer runs, with the work done by "agents, a person reviews" ([pricing](https://riskmandate.ai/pricing.html)). The homepage also says what it is not: "Model-drafted and marked as such. Not a compliance assessment. We are not an insurer and place no cover." ([home page](https://riskmandate.ai/)). ## 16 to 24 September: measuring, reviewing, arguing v1.21.0 walked five invented readers through the site one screenshot at a time and found "The product was not named where it was sold." ([v1.21.0](https://riskmandate.ai/versions/1.21.0.md)). v1.28.0 added Try it, "the first page on this site written for a stranger rather than a reader" ([v1.28.0](https://riskmandate.ai/versions/1.28.0.md)). v1.29.0 wrote down the reviewed level and said on the page that "nobody has bought one yet" ([v1.29.0](https://riskmandate.ai/versions/1.29.0.md)). v1.33.0 opened a section of business cases, "by the risk they change" ([v1.33.0](https://riskmandate.ai/versions/1.33.0.md)). v1.34.0 added a graph of OWASP and "Eighteen open-source cases" ([v1.34.0](https://riskmandate.ai/versions/1.34.0.md)). Fourteen releases in the record are dated 24 September, level with 15 September as the busiest day ([version record](https://riskmandate.ai/versions.md)). The last of them in the snapshot, v1.34.8, is titled "A control leaves a green risk" ([v1.34.8](https://riskmandate.ai/versions/1.34.8.md)).