← Signal GuardianStatus

Changelog

Public release notes. Newest first.

  1. Consultant pathway — Phase 5 scoped API keys

    beta
    v2.0.0-alpha.5
    • New consultant_api_keys table: hashed at rest (SHA-256), scoped (reports:read, clients:read), revocable.
    • Public read-only endpoints: GET /api/public/v1/reports and /api/public/v1/clients, bearer-token auth.
    • In-workspace panel to create, copy (once), and revoke keys; tracks last-used timestamp.
    • Completes the v2.0 Consultant Pathway phased rollout.

  2. Consultant pathway — Phase 4 assessment templates

    beta
    v2.0.0-alpha.4
    • New assessment_templates table with three seeded built-ins: GDPR Baseline, CCPA / CPRA Quick Check, Vendor Trust Snapshot.
    • Consultants can author custom templates (name, description, one item per line).
    • “Run for client” turns any template into a structured client_reports snapshot in one click.
    • Templates respect RLS: built-ins are read-only, custom templates are owner-scoped.

  3. Consultant pathway — Phase 3 white-label branding

    beta
    v2.0.0-alpha.3
    • Per-consultant branding row: firm name, tagline, contact email/URL, primary & accent colors, footer note.
    • Logo upload to a dedicated consultant-logos storage bucket (PNG / JPG / SVG / WebP, 2 MB cap).
    • Public /share/$token recipient view now renders the consultant's logo, name, colors, and footer.
    • All branding is owner-scoped via RLS; storage paths are namespaced by user id.

  4. Consultant pathway — Phase 2 expiring share links

    beta
    v2.0.0-alpha.2
    • Save snapshot reports against any client (JSON payload or auto-stub).
    • Generate expiring read-only share links (7 / 14 / 30 / 90 days) with one-time token reveal.
    • Public /share/$token page resolves the link server-side, increments view count, and refuses revoked or expired tokens.
    • Revoke any active link in one click — instantly invalidates it for any future visitor.

  5. Consultant pathway — Phase 1 foundation

    beta
    v2.0.0-alpha.1
    • New server-backed consultant workspace at /consultant — gated by the new consultant role.
    • Private client list synced across devices with row-level security (only the owning consultant + admins can read).
    • Archive / unarchive / delete primitives on each client.
    • Database foundation laid for Phase 2 share links and Phase 3 white-label exports.

  6. Monitoring v1 — schedules, tiers, snooze, vendor trust

    beta
    v1.5.0-beta.1
    • Opt-in scheduled refresh reminders per source (Google, Meta, Amazon).
    • Alert tier filter — show all, medium+, or high-only.
    • Digest mode collapses low/medium alerts into a single summary row.
    • Snooze primitives — silence individual alerts for 1 or 7 days.
    • Per-vendor trust trajectory card (basic v1).

  7. Retention foundations — score timeline & monthly opt-in

    beta
    v1.2.0-beta.1
    • New read-only Score Timeline card on the report — sparkline per dimension across your stored history.
    • Monthly summary email preference — quiet by design, opt-in only.
    • History, compare, and refresh surfaces polished into a single flow.

  8. Status page, changelog, privacy-safe analytics

    beta
    v1.0.0-beta.3
    • New public /changelog and /status pages.
    • Privacy-safe pageview analytics (no IP, UA, or PII; admin-only read).
    • Tightened profiles RLS — users can only read their own profile.
    • Feedback rows now visible and deletable by their owner.

  9. Auth, accounts, and gated surfaces

    beta
    v1.0.0-beta.2
    • Email/password and Google sign-in.
    • Profiles table with auto-create on signup.
    • Roles system (admin / moderator / user) with security-definer helper.
    • /settings and /admin now require login.
    • Password reset flow at /reset-password.
    • PWA manifest, icons, and Play Store assetlinks placeholder.

  10. Beta signals + in-app feedback

    beta
    v1.0.0-beta.1
    • Beta badge and app version in footer.
    • Backend status pill (Demo / Live / Offline).
    • Floating Send-feedback widget writes to Lovable Cloud.

  11. Public launch

    release
    v1.0.0
    • Guardian audit flow: upload → parse → score → report.
    • Demo mode and personal mode.
    • PDF export of report.
    • Account + history.
    • Privacy, Terms, and Security disclosures published.