Changelog

Every entry below is a real commit in this repository, grouped by theme. The short hash next to each line is verifiable with git show <hash>. No version numbers are invented — this repository has no release tags yet.

Security

86a3f0d Fixed a bug that locked paying cloud customers out of every paid feature.

a8ba6fb Closed several server-side (Worker) security findings and a broken access-control store lookup.

d9861da Fixed an audit-pack roster ordering bug and an e2e-only code path that could leak into a production bundle.

Encryption & data ownership

bc813e3 Fixed three crypto findings in the orgpack encryption library (header authentication, length-prefix parsing, sidecar key derivation).

9d132b0 Wired orgpack encryption into save/load — encryption and optional field scoping went from unreachable library code to a real, usable feature.

6b229fa Rebuilt the audit-pack exporter for real byte-for-byte determinism, added a PDF cover sheet, added an encrypted export variant.

Licensing & access

251458b Fixed a critical bug in the license-validation Wasm engine (JSON key-order preservation).

ad56bdf Rebuilt feature gating around a single canonical feature matrix; removed a testing-only bypass and added five feature gates that were missing.

e81f8b5 Wired real Anthropic API calls behind the consent gate, replacing stub responses for consenting, keyed sessions.

Design system

fa737ba Brought every stylesheet onto the shared colour-token system.

414b803 Defined six distinguishable, print-safe org-chart node states and fixed dead vacancy-node styling.

8046a16 Migrated settings, audit, comparison, table, and team-access screens onto design tokens.

a003d45 Continued the token migration and fixed two real UI bugs found along the way.

8a8648b Polished root-node styling and fixed the save indicator briefly showing an incorrect version number.

Testing & infrastructure

7a29659 Added a Playwright end-to-end harness with deterministic seed data, smoke tests, a license-tier audit, and a determinism check.

f6fe7f6 Added Worker unit tests and hardened Stripe webhook handling.

07b92f9 Added 28 unit tests for the file-encryption library.

ea239e4 Bootstrap: build fixes, test plumbing, and the brand constant used throughout the app.

98d8188 Baseline snapshot of the pristine repository before this development run.

Docs

0faaab1 Rewrote the credential checklist and operational runbooks.