Known limitations and roadmap

Expectations you can plan around, in one place, using the same claim classes as the rest of the product: Live = running in production, generally available (plan gating noted); Live-proven = running in production and exercised end to end by production acceptance and continuous security testing; Supported = available, used where the topology calls for it; Roadmap = planned, not shipping; Vision = direction, not a feature; Not yet supported means exactly that — don’t design around it until it moves. No capability is in Early Access as of the November 2026 releases.

Judgment, authority, execution, outcome

Capability	Status	Notes
SHIP / HOLD / BLOCK judgment and CSC Score	Live-proven	Deterministic for the same inputs. A judgment authorizes nothing; in CI the shipped templates fail on BLOCK by default and can run advisory.
ChangeGuard Permit	Live-proven	KMS-signed, single-use, ≤ 15 minutes, revocable; bound to action, target, environment, authority and time window. Details
Cloud Executor	Live-proven	Per-environment role with no AWS permissions; nothing installed; Edge not required. Details
Local Executor	Supported	For topologies or policies that require local presence. Details
Advise (default) and Auto (policy-bounded)	Live-proven	Per environment; Auto falls back to Advise outside its policy. Details
Verification against fresh evidence; one compensating action; escalation	Live-proven	No observation, no VERIFIED.
AWS Account Center	Live	Connect, verify, discover, repair, reauthorize. Details
Connected Environments	Live	Status, evidence source, judgment readiness, execution readiness, latest Permit, mode. Details
Change record and history; repo-scoped retrieval of retained CI verdicts	Live-proven	Append-only; outcomes attached by identity, never by recency.
GitHub pull-request verdicts (OIDC) and any-CI judgment	Live	BLOCK fails the check; HOLD never does.
Incident investigation with cited evidence	Live-proven	Root cause, proposed fix, verify criteria.

Evidence and posture

Capability	Status	Notes
Fleet (centralized, read-only evidence)	Live	Nothing to install; short-lived credentials; `get`/`list` only, no Secret access requested.
ChangeGuard Edge (optional in-cluster collector)	Supported	For node-local evidence or unreachable clusters. Never required for judgment, execution or Auto.
Security scanning (CIS, CVE, runtime, SBOM, deprecated APIs)	Supported (Edge, plan-gated)	Includes a privileged Falco DaemonSet — disclosed here.
Compliance mapping (SOC 2, PCI, HIPAA, FedRAMP, EO 14028 controls)	Supported (Edge, plan-gated)	Evidence support for your controls — not a certification of ChangeGuard or of you.
Argo CD / Flux change discovery	Supported (Edge)	Fleet-only environments do not read GitOps controller state.
Collector resource tuning	Supported (chart ≥ 5.3.6)	Defaults 25m/64Mi requests, 500m/512Mi limits; override via `agent.collector.resources`.

Engineering intelligence and investigation

Generally available since 7 November 2026 (release notes). Each capability is on by default where the plan carries it, and an admin can turn it off in Settings > Engineering assistance.

Capability	Status	Notes
Engineering Advisor	Live-proven (Professional, Enterprise)	Beside the verdict on both judgment surfaces; needs live environment evidence; silent when nothing is material. Details
Engineering Opinion, with Reasoning and Experience	Live-proven (Professional, Enterprise)	Forms from a root-cause analysis; recommends, never executes. Reasoning and Experience require the Opinion. Details
Incident workspace	Live-proven (every plan; the AI participant on Professional and Enterprise)	The conversation, owner, decision log and inbox on every incident. Details
Code Graph	Live (every plan)	Built in your cluster by the Edge indexer; off in the chart until you set `codeGraph.enabled`. Only the graph leaves your cluster. Details
AI model fallback	Live-proven	Every AI capability fails over from the preferred model (Anthropic Claude) to a permanent, evaluated fallback (Kimi K3.1 on Amazon Bedrock) on access or availability failures, with provenance on every result. Ask ChangeGuard is not covered. Details

Buying and AWS validation

Capability	Status	Notes
AWS Marketplace listing	Live	Public SaaS listing. The 14-day free trial covers up to 10 EKS environments and does not become a paid subscription; execution stays off unless you set it up. View the listing
AWS Foundational Technical Review (FTR)	Approved	Approved by AWS on October 14, 2026, valid until October 12, 2028. It requires a Well-Architected review with no high risks in security, reliability or operational excellence. An AWS review, not a certification.

Roadmap and vision

Capability	Status	Notes
Realms — a tenant split into production and test with separate authority	Roadmap	Designed; not built, not shipping.
SSO / SAML for app sign-in	Roadmap	Not available as of this release.
Self-hosted inference for judgment and reasoning	Roadmap	Judgment and reasoning run on Amazon Bedrock in the control plane today. (An optional Edge-side NVIDIA NIM setting exists for on-cluster scan analysis only — see AI analysis.)
Outcome-informed prediction	Future	Verdicts and outcomes are recorded so prediction can be measured against reality; no model, threshold, policy or prompt is modified by an outcome today. ChangeGuard does not “learn from every change”; Engineering Experience is retrieval of your own records, not retraining.
Model fallback for Ask ChangeGuard	Roadmap	Ask ChangeGuard still depends on the preferred model alone; the other AI capabilities fail over.
Governed autonomous change beyond Kubernetes (Terraform, IAM, cloud resources, networking, databases)	Vision	The same judgment, Permit and verification wherever a production change originates. Not shipping.

Not yet supported

Capability	Status	Notes
HTTP(S) proxy support for the Edge collector	Not yet supported	Direct outbound HTTPS to `api.changeguard.ai:443` is required. Fleet-only environments need no egress to ChangeGuard.
`kubectl` CSC / push-count status columns	Not yet supported	The CR prints blank `CSC`/`PUSHES` columns; the product is the source of truth.
Terraform plan awareness	Not yet supported	Judgment covers Kubernetes changes (and GitOps changes with Edge) today.
On-call schedule awareness	Not yet supported	Recommendations don’t know who is on call.
Self-serve API key rotation API	Not yet supported	Rotate in-app; confirm full invalidation via support for high-assurance cases.
Formal certifications (SOC 2, ISO 27001, FedRAMP)	Not held	Not claimed. See Testing and assurance for what is proven.

This page is maintained with releases. If a capability isn’t listed and isn’t marked Live, Live-proven or Supported in Core concepts, treat it as not-yet-available and ask before depending on it — we would rather tell you “not yet” than let a plan assume otherwise.

Get started

Connect

Decide

Engineering intelligence

Govern

Execute

Observe

Investigate

Security

Integrations

Posture evidence (Edge)

Security scanning (Edge)

AI Analysis

Edge operator reference

Releases & roadmap

Known limitations and roadmap

Judgment, authority, execution, outcome

Evidence and posture

Engineering intelligence and investigation

Buying and AWS validation

Roadmap and vision

Not yet supported