Release Notes

Current research-platform changes across evidence integrity, privacy controls, and AI agent oversight.

Evidence systems under study

New evidence, privacy, and agent-control features now implemented.

The latest backend work strengthens enterprise-grade governance: tamper-evident audit records, cryptographic key rotation, encrypted sensitive fields, GDPR rights workflows, resource mutation evidence, and an AI Agent Registry.

codeimplemented surfacereview basisenterprise relevancestudy lens
A01
Tamper-Evident Audit Chainaudit_events
Hash chain + HMAC signatures

Gives enterprise reviewers a verifiable sequence of actions instead of a loose activity log that can be rewritten after the fact.

integrity
A02
HMAC Key Rotationsigning_keys
Versioned signing keys

Lets the audit chain keep cryptographic continuity while keys evolve, which matters for long-lived regulated environments.

continuity
P01
Encrypted PII With Lookup Hashessensitive_fields
Fernet fields + companion hashes

Protects sensitive identity fields while preserving operational search and ownership lookup without exposing plaintext.

privacy
G01
GDPR Data-Subject Rightsprivacy_requests
Export + erasure router

Supports export and erasure workflows so privacy review is part of the platform architecture, not a manual afterthought.

rights workflow
R01
Resource Mutation Evidenceresource_mutations
Shared audit hooks across routers

Turns creates, updates, deletes, executions, toggles, acknowledgements, and remediations into reviewable tenant-scoped evidence.

change lineage
AG1
AI Agent Registryagent_registry
Agent registry API + UI

Creates a controlled inventory for autonomous agents so organizations can study ownership, access, lifecycle, and operational state.

ownership

Version 0.8.0-research

Major Release

Evidence integrity milestone

Highlights

  • Tamper-evident audit chain with HMAC signatures
  • HMAC key rotation for long-lived audit verification
  • Field-level encryption for sensitive identity and automation metadata
  • GDPR export and erasure workflows
  • Resource mutation audit hooks across mutating routers

New Features

  • AI Agent Registry MVP with backend API and authenticated UI surface
  • Auth-event audit hooks for login, registration, and authenticated user activity
  • Encrypted email and owner_email fields with companion lookup hashes
  • Automation create/update/delete/enable/disable audit evidence
  • Workflow create/execute/status/delete audit evidence
  • Scheduled report create/run/toggle/delete audit evidence
  • Compliance acknowledgement, remediation, and evaluation audit evidence
  • Integration toggle audit evidence

Improvements

  • Public pages updated to research wording and evidence-first positioning
  • Home page visual system updated around resource mutation evidence
  • Security and privacy capabilities made visible across public pages

Bug Fixes

  • Closed unauthenticated automation GET access path
  • Separated encrypted lookup from plaintext identity fields
  • Kept resource-audit failures non-blocking for parent mutations

Stay Updated

Subscribe to our newsletter to receive release notes and updates