Changelog

Notable changes per release. Latest first. Subscribe to the RSS feed for headless updates.

For breaking changes the version bumps the major and we send a deprecation notice 30 days ahead via webhook event api.deprecation.

2026-05-15

Phase 7 — Revenue & GTM

Self-serve signup with OTP + magic-link email verification.
Plan-aware quota enforcement; Starter hard-caps, Growth+ allow overage.
Midtrans payments behind a PaymentProvider interface.
Monthly invoice cron with idempotent generation.
Suspension scheduler — warning email at day 0–7, soft suspend at day 7, hard cancel at day 14.
Onboarding wizard in the dashboard (profile → API key → first verification).
Sandbox tenants with non-billable usage + reset endpoint.

2026-05-15

Phase 6 — Production readiness

Per-tenant + per-API-key rate limiting (Redis fixed window).
Structured JSON logging with PII redaction.
Health / readiness probes and graceful shutdown.
Daily soft-delete retention sweep per tenant settings.
Per-tenant CORS resolved by API key prefix.
Multi-stage Dockerfiles + production compose with Docker secrets.
k6 load-test baseline (health, KYC list, KYC initiate).

2026-05-15

Phase 5 — SDK + developer experience

@veridi/sdk: typed client with X-Api-Key auth and envelope unwrap.
OpenAPI / Swagger UI at /api/v1/docs.
Webhook signature helper (HMAC-SHA256, constant time).
apps/docs developer site live.

2026-05-15

Phase 4 — Dashboard

Casdoor OIDC login with HMAC-signed session cookie.
Verification list + detail pages with role-gated PII.
Approve / reject review workflow.
API key, webhook, settings, analytics admin pages.

2026-05-14

Phase 3 — KYB

AHU registry lookup with Redis cache.
Director KYC linking with NIK dedup.
UBO tracing (basic, ≥25% ownership).

2026-05-14

Phase 2 — KYC

AES-256-GCM envelope encryption for KTP fields.
Presigned S3 upload bound to SSE.
Azure Document Intelligence OCR worker.
BullMQ queue infrastructure.
Liveness provider abstraction.
Webhook dispatcher with HMAC + retry.