Changelog

    Customer-visible changes to Provenance, grouped by release date.

    2026-05-03

    • Public pages polish: fixed duplicated header/footer on pricing and bundle pages, removed internal env-var names from customer copy, and expanded pricing-tier bullets.
    • Customer-facing /docs/quickstart rewrite — six-step flow from signup to embedding the verify badge.
    • TypeScript SDK published as @naburis/provenance-sdk for the public + authenticated read API.
    • GDPR Article 20 data-export endpoint at /api/provenance/v1/app/me/export.
    • Multi-tenant org switching: customer_org_memberships table + topbar OrgSwitcher backed by real memberships.
    • Query-time PII scope gate: api keys list/create/revoke now require admin+ role before rows load.
    • First writers for claim_statements + claim_evidence_links (extractor) and authority_snapshots / authority_refs (new provenance-authority-import binary).

    2026-05-02

    • Data-quality schema landed: evidence_artifacts (split URL/domain/content identity), claim_statements + claim_evidence_links, decisions ledger, source_clusters, projection_events (CloudEvents-shaped), authority_snapshots/refs.
    • Per-tenant projector runner with leases + quarantine; first concrete projectors (audit_tail, mview_refresher, keystone_outbox).
    • Page-frame composition layer + ProvenanceConsolePage applied to all 9 console pages (Overview, Vendors, Trust Center, Evidence, Crawls, Statements, Storage, Billing, Settings).
    • /healthz vs /readyz strict split — readyz now gates on migrations-at-head + required cache + secrets.
    • Serialization-boundary PII classifier with coverage_map exposed on every read envelope.
    • Transactional outbox semantics for vendor mutations.

    2026-04-26

    • Provenance app hardening pass — static smoke + URL parsing fixes, deploy-retention polish.

    2026-04-25

    • Stable main consolidation — single clean baseline ahead of every active branch.
    • Caddy login-route alignment for the BFF.

    2026-04-22

    • Marketing CTA buttons unified through a single library; analytics events flow consistently across all entry points.

    2026-04-20

    • Polished launch — signup, Stripe Checkout + webhook, Svix SDK, rate limits, evidence + trust APIs.
    • Expanded vendor seeds, importer CLI, parser detection hooks, and crawl-host politeness.
    • Docs site, legal drafts, compare view, Prometheus /metrics on the gateway.