Charlotte 2.3 is the biggest update yet: control what AI agents may do, turn real traffic into regression tests, and keep them in git.

AGENTS AND GOVERNANCE
• Governance window (⇧⌘G): choose what agents may do with capability profiles, allow or block hosts, and require your approval before an agent's rule changes live traffic.
• Step debugger: pause the next matching requests or responses, edit them, then send them on.
• Tamper-evident audit trail of flows, agent tool calls and setting changes, exported as a signed bundle anyone can verify.
• Data residency: keep governance data in a folder you choose, or refuse every outbound connection Charlotte itself would make.
• OpenTelemetry export of flows and tool calls to your collector (Grafana, Datadog, Honeycomb…).
• MCP gateway: put other MCP servers behind Charlotte, with a firewall that pins tools, blocks poisoned ones, and allows or denies tools by name.
• Analyzers: your own JSON rules for PII, secrets, missing headers and GraphQL depth, run on captured traffic.
• charlotte.config.json: version a team's policies, rules, analyzers and settings in one file.

TEST WITH REAL TRAFFIC
• Assert (⌥⌘A): mark a captured journey as a golden session, replay it against a new build and see status, header, body, timing and side-effect differences, with a hint for each failure.
• Learn noise from repeated runs, accept a new baseline and read exactly what changed.
• Environments, secrets kept in your Keychain, coverage of your OpenAPI endpoints, and a diff with any earlier golden file.
• Fault injection: make chosen requests slow, fail, return malformed bodies or drop the connection, repeatable with a seed.
• Compare Sessions (⌥⌘C) and Replay Session Against…: A/B two captures, or replay one against another server.

SHARE
• Share Live (Relay): teammates watch your capture as it happens, redacted and end-to-end encrypted.
• Encrypted snapshots with a passphrase, safe to attach to a ticket.

GIT FOR HTTP (command line)
• charlotte --golden-check runs goldens in CI with JUnit output; --golden-record records them from your tests.
• Readable git diffs and three-way merges of goldens, coverage and staleness reports, and breaking-change checks between OpenAPI versions.
• The App Store build asks once per project folder before the command line uses it.

IMPROVEMENTS
• One Start/Stop button, as in Xcode; Breakpoints has its own breakpoint icon.
• Windows sign-in, the proxy and the command line rebuilt on Swift's strict concurrency checks for steadier operation.