Home / Articles / Handing secrets to agents and browsers / Versions / v1.4.0
Handing secrets to agents and browsers: what changed in v1.4.0
From v1.3.0 (2026-10-19, d303ce0f1) to v1.4.0 (2026-10-27, db67c5ce1), paragraph by paragraph.
0 paragraphs added, 0 removed, 2 changed in place, 43 unchanged. About 0 words added and 75 removed. Insertions are marked like this, deletions like this; unchanged runs are folded to one line; figures appear as their file names.
2 unchanged paragraphs
!shot ks-flow.webp | images/ | Handing a secret to an agent or a browser,browser without anyone seeing it: the recipient makes its own key pair and shows only the public half; the owner encrypts to it, signs and drops the ciphertext for one download; the recipient decrypts it straight into the tool that needs it. Steps 1 to 4 ran end to end on a local SG/Send server. | architecture
27 unchanged paragraphs, under In short {#in-short}, The pain {#pain}, What SG/Send already has {#backend}…
!shot ks-prior.webp | images/ | One-time secret sharing,sharing andtools whatcompared is different aboutwith handing onea secret to an agent: where the secret is encrypted, whether it is read once, whether it expires, whether it is encrypted to the recipient's own key, and whether there is a command line,agent, from each tool's documentation; the last row was run.documentation. | comparison
14 unchanged paragraphs, under A brief for the site {#brief}, What this does not claim {#limits}, Where this comes from {#sources}