Engineering changelog

What shipped.
Engineering side.

A running record of platform-side capability changes - the engines, not the buttons. Sorted newest-first. Versions are internal monikers, not semver.

Heads up: month-level dates reflect when each capability went production-stable internally. Behaviour-visible UI rollouts may land on a different cadence.

Plan-and-approve workflow goes platform-wide

Every write-intent AI action now persists as a plan artifact. The approver's permissions are re-checked at execute time and replays are idempotent - the same approval can never run twice.

  • Plan artifact persisted with proposer, approver, and timestamp
  • 72h idempotency window with deterministic ensure keys
  • Cancel-safe and replay-safe across shard restarts

Snapshot manager replaces external telemetry

Shipped a 4,364-line self-hosted time-series engine and migrated all backend processes off external monitoring. Heartbeat metrics now flow into the platform's own snapshot manager every minute.

  • 60s heartbeat tick: CPU, memory, event-loop lag, warn / error counters
  • Temporal sampling (hourly / daily) and spatial binning (per-market)
  • Gap healing for missed intervals during shard restarts

Token barriers for real-time session revocation

Added a 450-line token barrier manager. Operators can revoke a stolen session per-user, per-IP, or per-pool and the change propagates to every container within the next request - no central blacklist DB needed.

  • 60s eviction worker keeps barriers fresh across the fleet
  • Per-user, per-IP, per-pool revocation scopes
  • Survives container restarts via durable entity store

Two-phase aggregation pipeline at 100ms

Hot data now aggregates in memory every 100ms; cold data flushes 5,000-row batches every five minutes. Live charts feel instant and the database doesn't drown.

  • 100ms aggregation worker · 500ms broadcast cadence
  • 5min persistence with 5,000-row batches per tick
  • 60s eager / 5min lazy digest with auto-switching

Internal PKI graduates to ECDSA P-384

Replaced RSA-2048 child certs with ECDSA P-384 across the fleet. mTLS handshakes are faster, certificates rotate hot with zero downtime, and the CFSSL CA stays pinned at v1.6.5.

  • 5-year CA, 3-year child certs with auto-rotation
  • 6 cert types distributed over a signed internal channel
  • Hot-reload keeps every gateway online during rotation

Three-tier conversation memory

Session, user, and pool memory tiers landed across the AI surface. The next teammate's question already knows what the last one approved - context survives sessions, sweeps run hourly.

  • Session memory 16K chars / 40 entries
  • User memory 10K chars / 60 entries, cross-session
  • Pool memory 10K chars / 60 entries, shared across teammates
Dig deeper

Want the full surface?

The architecture page lists every capability grouped by domain. The engine page shows how the substrate actually runs in real time.