> For the complete documentation index, see [llms.txt](https://docs.trustlogix.io/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.trustlogix.io/release-notes/2026-q3-releases/july-2026.md). # July 2026 This release delivers full lifecycle support for Unified Lakehouse Policy across Snowflake and Dremio, extends TrustAI with Databricks Genie and introduces MCP Gateway Passthrough Option — along with a redesigned policy creation experience and dozens of reliability improvements. **Feature List** * Unified Lakehouse Policy (ULP): Full RBAC + ABAC Row-Level Security Lifecycle * New Access Policy Creation Wizard * MCP Gateway Passthrough Option * Intent-Based Access Control (IBAC) for AI Agents * TrustAI: Databricks Genie Support and Faster Prompt Response Times * Microsoft SharePoint & Work IQ MCP Integration * Compliance Framework Tagging in Guardian Agent Risk Findings * Relationship-Based Access Control Enhancements *** #### New Features & Enhancements **Unified Lakehouse Policy (ULP)** **Full Policy Lifecycle Across Snowflake and Dremio:** Unified Lakehouse Policy now supports the complete policy lifecycle — create, review, publish, deploy, enable, disable, and re-deploy — from a single UI and API, with policies enforced simultaneously across both Snowflake and Dremio for Iceberg-based data lakehouses. **Attribute-Based Row-Level Security:** Building on ULP's RBAC foundation, you can now also create and enforce attribute-based (ABAC) row-level security policies, using a dynamic condition builder in place of manual role assignment. A dedicated User Attributes tab makes managing attribute mappings straightforward, and user attributes are now resolved dynamically at policy evaluation time for more accurate enforcement. **Unified Catalogs Across Platforms:** New Unified Catalog and Unified Policy views let you browse data objects and policies across lakehouse platforms in one place, with objects and roles automatically mapped across Snowflake and Dremio so you can manage them under one consistent name. Schema-level privilege assignment is now supported for multi-object RBAC policies. **Automatic Sync and Drift Detection:** Access policies now sync automatically to Dremio and Snowflake data sources, and policy drift detection flags newly registered data sources that match an existing unified policy so they can be brought into sync. *** **Access Policy Creation** **Redesigned Policy Creation Wizard:** A completely redesigned, multi-step wizard now guides you through creating and managing access policies — with guided configuration, role management, a review step, and clear deployment status visibility throughout. *** **TrustAI** **Databricks Genie Support (Now Generally Available):** Guardian Agent fully understands Databricks entities — users, groups, catalogs, tables, and clusters — for rich, contextual security analysis. Genie (Databricks' AI assistant) activity is now ingested for security analysis, with natural-language understanding tuned specifically for Databricks terminology. Databricks support is now available to all customers. **Faster Guardian Agent Responses:** Guardian Agent now responds significantly faster on Snowflake environments, by integrating directly with Snowflake official MCP servers, giving more accurate answers. **Deeper Investigation:** You can now ask follow-up questions directly from Guardian Agent risk findings to investigate further without starting a new query. **Compliance Framework Tagging:** Guardian Agent responses now include inline compliance framework tags — including NIST AI RMF, ISO 42001, and the EU AI Act — directly within risk summaries and findings. *** **Intent-Based Access Control (IBAC)** **IBAC Enforcement:** Agents can now be assigned a declared purpose at registration, and that intent is evaluated before any tool call is allowed — with configurable off/monitor/enforce modes and Kill Switch behavior by default. IBAC now also extends to Microsoft Work IQ MCPs, including SharePoint. *** **MCP Gateway Passthrough Option** **Passthrough Option:** Register MCP servers — using passthrough authentication, where the agent's own credentials are validated and used directly against the downstream service. Each server receives its own unique gateway URL and authentication handshake, matching the downstream identity provider. *** **Microsoft Ecosystem Integration** **SharePoint/OneDrive/Teams & Foundry Support:** TrustAI's policy fabric now supports Microsoft 365 MCP servers, with server- and tool-level policy enforcement on SharePoint access by Foundry agents. *** **Relational Based Access Controls** **Filter by Employee/Manager:** ABAC now supports filtering by employee name and manager for easier navigation. **Required Attributes:** Administrators can mark attributes as required and manage them through an improved slide-panel dialog.\ \ **Expanded Governance Capabilities:** Extended entitlements transparency, Guardian Agent-driven auditability. --- # Agent Instructions This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com. ## Querying This Documentation If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question. Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter: ``` GET https://docs.trustlogix.io/release-notes/2026-q3-releases/july-2026.md?ask=&goal= ``` `ask` is the immediate question: it should be specific, self-contained, and written in natural language. `goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal. The response will contain a direct answer to the question and relevant excerpts and sources from the documentation. Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.