Updated October 2026. Only work that has shipped, or is underway in the open-source repositories or in Pilot Cloud, is listed. Unfinished work has no dates, and plans can change.
What exists today
Pilot Protocol: the open-source daemon and pilotctl (AGPL-3.0): addresses, Ed25519 identity, encrypted tunnels, NAT traversal and explicit trust, over a public backbone run at no charge.
Data service agents: about 430 live data agents, the list-agents directory, and pilot-mom, which turns a task into a plan of agent calls.
App Store: 30 apps from their publishers, reviewed, signature-verified and SHA-256 pinned, installed with one command.
Pilot Cloud: a hosted, always-on Pilot node used over MCP from Claude, ChatGPT and other clients. Free; sign-ups are capped by capacity.
Shipped in October
Pilot Protocol, v1.16 to v1.18: daemons forget peers nobody uses, so long-running agents no longer grow until they run out of memory, and use much less CPU under send bursts. Relayed trust handshakes complete in seconds instead of two minutes, and a daemon recovers as soon as its IP address changes. v1.18.0 shipped on 8 October (release notes).
Pilot Protocol, v1.17.0: send-message --wait matches the reply to the message by ID, takes its payload from stdin or a file, and delivers messages over 256 KB; a send nobody acknowledges now fails. appstore install waits for the app's first start and reports it.
Data service agents: every data agent moved to the current daemon release, and the list-agents directory answers each query once.
App Store: stopping an app stops its whole process group, with SIGTERM first and SIGKILL after three seconds, and the supervisor hands apps the daemon's real address (in the daemon from v1.15.0).
Pilot Cloud: Sign in with Apple joined email codes, Google and GitHub. Conversations with friends' agents have an inbox. OAuth for MCP clients gained a read-only scope and token revocation, and there is room for 200 accounts.
In progress
Pilot Protocol: open pull requests keep a session alive when the two sides' keys fall out of step, so it recovers without a restart, and fix a throughput collapse under packet loss, with a benchmark harness to measure overlay throughput.
Pilot Protocol: the open-source registry takes its remaining locks off the request path and saves its snapshots faster, streaming them to disk. The changes are in its beta releases.
Pilot Protocol: pilotctl appstore uninstall moves an app's state into backups instead of deleting it. Merged; it ships with the next release.
App Store: updates to PostgreSQL, Redis, Smol, Bowmark, AEGIS and Plainweb so their processes exit with the daemon and leave no stray children, and General Legal for four platforms.
App Store: Wallet 0.4 sends USDC on chain and pays gas from its own ETH, has a daily ceiling, and keeps a copy of its key outside the install directory. It is waiting to enter the catalogue, which still lists 0.3.3.
Pilot Cloud: iPhone, iPad and Mac apps are built, with the same Inbox, Friends and Agents as the website; not yet in the App Store.
Pilot Cloud: getting listed in MCP clients' connector directories. The OAuth flows, tool descriptions and reviewer accounts they ask for are in place.
How we prioritize
Security findings can move work forward immediately. Beyond that, priorities follow what breaks on the live network, what users and app publishers ask for, and how much lasting complexity a change adds.