Changelog

All notable changes to CAIRL are documented here. Format follows Keep a Changelog and Semantic Versioning.

[Unreleased]

Added

Changed

Fixed

Removed

Security

[0.3.0] - 2026-04-01

Added

Deployed expanded public legal and trust surfaces, including cookies, refund, DPA, acceptable use, biometric, data retention, compliance, updated terms, trust center, security overview, and an online/downloadable Enterprise Security Packet.

Added audit-ready Shopify integration infrastructure with signed install, lookup, and uninstall endpoints, HMAC validation, rate limiting, and audit logging.

Added event ledger and cohort infrastructure with canonical event types, redaction-aware timeline reads, and supporting tests.

Added `robots.txt`, XML sitemap, and additional marketing/supporting pages to improve search discovery and content coverage.

Changed

Refined app navigation so NavRail modules stay scoped to the active context and business contexts auto-activate more consistently.

Promoted and cross-aligned legal, footer, menu, privacy, and security content across the marketing site.

Fixed

Restored missing business contexts in the context switcher after membership reconciliation.

Invalid context slugs now fail fast instead of silently falling back to `b-business`.

Corrected E.164 regex constraints in phone-related migrations so database migrations apply cleanly.

Unified app-shell version badges with the shared platform version source.

Security

Hardened Shopify endpoints with HMAC authentication and integration audit trails.

Published updated security overview and Enterprise Security Packet surfaces for partner review.

[0.1.0] - 2026-03-25

Added

Initial governed release baseline under GOV-003

Semantic versioning, changelog, and release PR workflow

Version display in app shell footer and admin dashboard

Public changelog page at `/developers/changelog`

CI workflows for release PR validation and automatic git tagging

Version source helper (`src/lib/version.ts`) for consistent version access