Arc 1.8.4

• Connections own independent API keys and provider model catalogues. Secrets stay in the operating-system credential store; Arc shows only masked fingerprints and never stores the key in room data.
• An agent keeps its room identity when it is copied, multiplied, or moved between hosted and local sources. Local runtimes and local models are reusable sources, and managed names stay aligned with the model that is actually active.
• New room agents begin in Safe Workspace. Untested hosted routes cannot receive Writer or Trusted Host access until verified, and an authoritative source receipt records the exact provider and model behind every managed agent.
• Repository bindings now have one explicit active owner for each canonical path, retain their history, and cannot be silently taken over by room-creation metadata.

• When a provider counts more prompt tokens than Arc predicted and rejects the request for exceeding its context limit, Arc performs one bounded recovery, compacts proactively, and resumes the turn without duplicating workspace writes.
• Progressive MCP tool search now understands multi-word questions, ranks matches term by term, and returns available tool names on a miss instead of leaving an agent at a dead end.
• Managed source receipts prevent a stale runtime from silently reverting an agent to an older provider or model after restart or synchronization.
• The Arc icon now remains legible on light macOS surfaces instead of letting its near-white mark disappear in Finder or the Dock.

Windows 10/11 (64-bit), or macOS 11+ on Apple Silicon.