# Changelog

> What changed in the BROCS framework, versioned and dated. Site tweaks do not appear here; changes to the framework itself do.

Source: https://brocs.fyi/resources/changelog/
Framework: BROCS (Build, Run, Observe, Control, Secure), brocs.fyi. CC BY 4.0, attribute to brocs.fyi.

---


A framework that cannot change is a slogan. This page records what changed in BROCS
itself: a letter gaining or losing a vertical, a definition being corrected, an argument
being lost. If you cite the framework, cite the version.



## Version 1.2: The library and the questions grow; the FAQ and the reading list arrive

Date: 2026-08-26

The failure-mode library grows from seven entries to sixteen, every one publicly sourced: Samsung's three pastes in twenty days, Microsoft's 38TB SAS token, NYC's MyCity chatbot, Zillow Offers, the Slack AI exfiltration demonstration, the one dollar Tahoe, the OpenAI Redis leak, the GPT-4o sycophancy rollback, and the three-day Codex deprecation. The questions grow from twelve to twenty-one with the ones asked in incident reviews, audits, and renewals: insider exfiltration through an assistant, hidden instructions in documents, retention and training terms, the 2am incident, cost caps, audit evidence, air-gapped operation, exit with the derived artifacts, and the model updated underneath you. A twenty-seven answer FAQ about the framework itself and a sourced reading list join the resources.

## Version 1.1: Control gains a sixth vertical: remote access

Date: 2026-08-26

Twelve buyer questions collected from real rooms kept landing on the same missing ground: remote work without data movement, consultants and contractors, cross-border travel, and cross-border data governance. Eight of the twelve mapped to Control, so Control now carries remote access as a first-class vertical alongside configuration, ingress, identity, storage, and routing. The questions themselves are published at /resources/questions/.

## Version 1.0: The framework site launches at brocs.fyi

Date: 2026-08-26

Five letters, twenty-six vertical pages, the failure-mode library with seven sourced public incidents, a thirty-two term glossary, the assessment and its scoreline, why five, and adjacent practices. The framework text is published under CC BY 4.0 and the data files are public at github.com/calliopeai/brocs.

## Version 0.9: BROCS is coined

Date: 2026-08-22

The origin essay is published at leomata.com/blog/brocs. Build, Run, Observe, Control, Secure, named as the five parts of the surface where AI apps and agents meet the enterprise.