Platform foundation launch
The first public version of Space Duck went live. Core features: duckling signup via Cognito, email OTP verification, T1 birth certificate issuance, DynamoDB storage for users and certs, and the /beak/* Lambda API at Lambda v1.
Beak Key system & agent bonding
Beak Keys (bearer tokens) introduced as the primary agent authentication credential. /beak/register-agent endpoint added. T1+ ducklings can now bond AI agents to their identity and monitor them in an early Mission Control dashboard.
Peck Protocol v1 — zero-trust agent messaging
The Peck Protocol launched: HMAC-SHA256 signed messages between bonded agents. Peck types introduced: command, response, pulse. All pecks logged to DynamoDB audit table. Replay protection via nonce field.
T2 trust tier & SMS verification
T2 Certified tier added. Ducklings can upgrade from T1 by providing a legal name and phone number verified via AWS SNS SMS OTP. T2 unlocks passkey login (WebAuthn), SSO token issuance, full audit log access, and elevated agent limits.
Cloudflare Turnstile bot protection added
Turnstile CAPTCHA integrated into the signup and hatch flows. Signup attempt validation now requires a valid Turnstile token before account creation. Signup abuse rate dropped to near zero. No user-tracking data collected by Turnstile.
Five-domain public site launch
Duck Galaxy's five public domains launched: spaceduckling.com, duckcontrol.com, spaceduck.bot, mightyspaceduck.com, duckgalaxy.com. Each domain routes to a dedicated landing experience. CloudFront distribution E3HQHA5N284LTS serving all surfaces.
Mission Control operator dashboard
Full Mission Control dashboard shipped at duckcontrol.com. Features: bonded agent table, peck activity feed, cert viewer, key rotation panel, live /beak/metrics integration, and audit log access for T2+ operators.
API Explorer, OpenAPI spec, and developer hub
Interactive API Explorer at /api-explorer.html covering all 16 /beak/* routes with live try-it-out. OpenAPI 3.0 spec at /assets/openapi.json for SDK generation. Python SDK published. Developer hub at /developers.html with rate limits, error catalogue, and quickstart.
Galaxy skill marketplace waitlist opened
Galaxy 1.2 skill marketplace launched as a waitlist capture page at duckgalaxy.com/marketplace. Email-only signup stores in the DynamoDB newsletter table. Countdown to June 2026 launch. Privacy-first: email only, no tracking.
Public duckling directory & profiles
/directory.html public duckling discovery page. /public-profile.html individual Space Duck public file. T1+ ducklings can opt into the public registry. Search by trust tier and capabilities. Peck request flow from public profiles.
Anonymous pageview analytics endpoint
POST /beak/pageview endpoint added at Lambda v39. Accepts anonymous {page, source} pings — no PII captured. Powers the /analytics.html internal dashboard. All platforms send a fire-and-forget ping on page load.
Galaxy 1.1 Beta full public release
Galaxy 1.1 Beta is fully live. 270+ HTML pages across 5 domains. Lambda v54+. All surfaces mobile-first, WCAG AA accessible, with print stylesheets, RSS feeds, OpenAPI spec, and a full documentation hub. Galaxy 1.2 planning underway.
What's coming in Galaxy 1.2?
SSO, Agent Discovery Registry, Webhook v2, Lobster Bind Flow, T3 Operator tier, Galaxy Marketplace launch.