Release history
What changed, and when.
Desktop, Server and Evidence-Public are versioned together at the current release boundary. Filter the timeline to follow the component you use.
Desktopv3.9.0
- Added local light A4 portrait PDF publishing with readable schedule details
- Event-scoped processor enrolment and automatic signed Desktop evidence
- Fixed Public Schedule and authenticated Masterplan audience rules
- Calmer permitted-data guidance and operational field categories
- Current campaign fixes, dependency updates and packaging hardening
Serverv3.9.0
- Three-step root commissioning, controller trust and governance publication
- Deletion-scoped snapshot resolution and complete portable evidence verification
- Hybrid HA replication barriers, qualified two-way failover and recovery hardening
- Action-first controller-transparent email and calmer role-specific administration
Evidencev3.9.0
- Published the portable complete-chain verifier for exported evidence ZIPs
- Published local-only processor- and controller-key tools with no private-key upload
- Documented offline verification, evidence boundaries and repository ingestion rules
- Tagged the Evidence-Public verification baseline alongside the App and Server release
Desktopv3.8.1
- Corrected separation between the Desktop manifest signing key and public release signing identity
- Republished the verified Desktop package metadata without changing the supported data format
Desktopv3.8.0
- Added signed runtime integrity verification, deletion evidence and protected-data boundaries
- Added the separate one-time legacy conversion operator tool without runtime compatibility
- Hardened cross-platform packaging, encrypted custody and release verification
Serverv3.8.0
- First signed Public Server release with immutable container images, manifest, SBOMs and signatures
- Added the guarded management TUI and qualified standalone installation path
- Established Public documentation, support and vulnerability-reporting contracts
Desktopv3.7.0
- Added direct schedule editing after optimisation
- Repaired copied-task identity, timing and assignment behaviour
- Improved final-review and publication-state feedback
Serverv3.7.0
- Added the governance, retention, deletion and signed-evidence foundation
- Separated authenticated Masterplan data from deliberately public schedule data
- Added protected snapshot and operational audit foundations
Desktopv3.6.0
- Expanded solver diagnostics, bottleneck explanations and reproducible run metadata
- Improved flow-check feedback before long optimisation runs
Serverv3.6.0
- Introduced the symmetric two-node HA foundation, writer fencing and peer replication
- Added load-balancer readiness, witness authority and guarded failover operations
Desktopv3.5.0
- Added General Schedule publishing for deliberately public fields
- Added selected-day publishing while retaining explicit publication boundaries
Serverv3.5.0
- Rectified deployment, update and rollback workflows around immutable release inputs
- Improved host prerequisites, secret-file custody and operator health diagnostics
Serverv3.4.0
- Improved event and account administration while preserving role boundaries
- Refined public schedule presentation and operational security controls
Desktopv3.4.0
- Added the concept of working day, which allows to seggregate optimisations by sleeping and not by midnight
- Added the ability to copy and paste selected tasks in the CMI-view
- Added human-readable timestamps for optimisation, publish, manual edits, and pending changes
- Added OS secure credential storage for sensitive secrets
- Desktop updates now preserve the local database and encryption key
- Added visible startup integrity-check progress before backend/frontend startup
- Added crash/error diagnostics with log-dump support where appropriate
- Self-hosted fonts to avoid external font loading/CSP problems in packaged builds
- UI-overhaul to make the interface calmer
- Several bugfixes
Desktopv3.3.0
- Added presentation module for optimised schedule
- Modified the task template creation process to be more intuitive
- The standard for the publish target is now none instead of both
- Capabilities are now sorted (secondary) by machine_name and not display_name
- Upgraded JS dependencies: next to 16.2.6, postcss to patched 8.5.14, electron to 42.0.1, electron-builder to 26.8.1.
- Hardened OAuth state handling, token exemptions, logging, frontend callback validation, and Electron navigation/IPC/permissions
- Metrics board can now highlight capabilities too
- Added loading screen on app startup
- Fixed various bugs concerning presentation mode and port handling
Serverv3.3.0
- Added the ability to freeze and rename snapshots
- Added more runtime variables to be set by the admin in the security tab
- Added the role issuer that has (non-critical) admin access for one specific event they are associated with
Desktopv3.2.0
- Encrypted Google Calendar token data and event secrets at rest using Fernet-based column encryption
- Added per-session auth token injected via Electron for all backend requests
- Merged optimiser engine into the backend - single service, smaller installer, simpler architecture
- Added 5 MB request body size limit middleware
- Added Content Security Policy headers to the renderer process
- Fixed countless smaller bugs
Serverv3.2.0
- Accessibility & UX upgrades: colour-blind modes, swipe/keyboard calendar navigation, PWA install prompt, and improved admin UI
- Scheduling & publishing improvements: schedule snapshots/rollback + enhanced batch activation tools with previews & QR exports
- Stronger authentication & session security: passkey rate limiting, session fingerprinting/revocation, encrypted data, safer WebAuthn handling
- API & system hardening: rate limiting, input/request validation, Content-Type enforcement, reduced logging exposure, stricter CSP
- Compliance, auditing & ops: audit logs, GDPR tools, secret rotation, Docker secrets, dependency cleanup, and security config controls
Desktopv3.1.0
- Added person_id to setup export for automatic person-user account linking on server import
- Publish target now defaults to 'none' instead of 'both' - users must explicitly choose a target
- Added more extensive toast notifications and solver progress visualisation
- Extended limit for flow-checker to 10 minutes
- Updated font to Source Sans 3
- Enabled ASAR integrity verification (Electron-native tamper protection for application shell)
- Added Ed25519 signed hash manifest with automatic startup integrity check for all bundled binaries
- Added integrity verification UI in About dialogue (Verify button with per-file status)
- Added SHA-256 checksums (checksums.txt) to GitHub Releases for download verification
Serverv3.1.0
- Push notifications - participants are automatically notified when a new schedule is published
- Offline mode - the calendar is cached locally so it can be viewed without an internet connection
- Announcement system - administrators can broadcast messages to all participants via push notification
- QR code activation - administrators can display a scannable QR code instead of sending activation links
- QR codes detect when a link has been used and allow generating a new one on the spot
- My-tasks navigation: floating arrow buttons on task detail modal to navigate between your assigned tasks
- Automatic person-user linking via person_id during server setup import
- Updated font to Source Sans 3
Desktopv3.0.1
- Fixed application icon to use transparent background at 512x512 (required for macOS)
- Fixed 'Failed to fetch' errors by replacing hardcoded startup delay with proper service health-check polling
- Changed all internal URLs from localhost to 127.0.0.1 to avoid IPv6 resolution issues on Windows
- Application now shows a clear error page with diagnostic logs if backend services fail to start
- Fixed missing execute permissions on macOS/Linux for bundled backend and optimiser binaries
- CI build now ensures PyInstaller binaries retain execute permissions before packaging
- Fixed flow-checker ortools dependency missing from the bundled backend executable
- Fixed icon not found error on macOS caused by assets folder missing from packaged app
- Themed icon now persists to user data directory instead of read-only app bundle
Desktopv3.0.0
- New desktop application powered by Electron
- Complete rewrite of the cross-day optimisation engine using OR-Tools CP-SAT solver
- Real-time flow-check diagnostics with bottleneck analysis
- Pre-optimise gate to validate data before running the solver
- Dark mode support across the entire application
- Cross-platform support: Windows, macOS, and Linux
- Bundled backend and optimiser - no Python installation required
Serverv3.0.0
- Multi-user web calendar with passkey (WebAuthn) authentication
- Complete rewrite of the cross-day optimisation engine using OR-Tools CP-SAT solver
- Real-time flow-check diagnostics with bottleneck analysis
- Pre-optimise gate to validate data before running the solver
- Dark mode support across the entire application
- Docker Compose deployment with Caddy reverse proxy and automatic HTTPS