Changelog

Changes to the surfaces these docs describe: the public check, receipts, keys, the transparency log and evidence. Each entry names its Linear issue or commit.

Documentation site

2026-11-07 · AG4-399

These docs: quickstarts tested in CI, the detection continuum guide, the decision playground and this reference. Behind rel.docs_site, off by default.

Troubleshooting plane core

2026-11-06 · AG4-182 · 434679ef

Reconstruction, inspection, shadow replay and what-changed views over recorded decisions.

Receipts chain per tenant stream

2026-11-01 · AG4-278 · fd1bb425

Each receipt's prev names the previous receipt in the same tenant stream; the first carries 64 zeros. The stream is per Worker isolate.

Evidence packs

2026-10-31 · AG4-106 · 375f05fc

A pack format, builder and offline verification. Behind exp.rd3_evidencepack.

Calibrated identity assertions

2026-10-31 · AG4-103 · b989d3c5

Identity confidence ships with a calibration report or not at all. Behind exp.rd3_identity_fusion.

Range list recorded on check receipts

2026-10-29 · 88709169

Receipts can carry range_source, range_list and range_fetched_at, naming the operator range list a check used.

Public check served from the shared surface

2026-10-29 · c5fa736d

POST /v1/check on the API and edge run the same handler, with CORS open for browser use.

Staging receipts signed with the deployed key

2026-10-29 · 74a5f488

Staging signs with the Worker secret and /health reports signing, so a fallback to the test key is visible.

Signing keys survive deploys

2026-10-29 · 5a727704

Staging deploys no longer rotate the live signing keys, so earlier receipts keep verifying.

Fail-open never upgrades a deny

2026-10-29 · 8ea8f0bf

When the decision budget is exceeded, deny, step-up and admin outcomes are kept.