Every entry below cites a model, a feature, a runbook or a spec — never marketing. Sorted by date, grouped by month, oldest at the bottom.
A fail-closed provenance gate blocks any credit model trained on synthetic labels from being promoted or served to a borrower; a real forward-outcome label substrate replaces them. Nothing borrower-facing activates until the compliance ceremony completes.
AA-sourced data carries consent purpose codes, and a fail-closed gate keeps it out of credit decisioning unless the borrower separately consents to that purpose. The machinery ships dormant; consumer-visible behaviour is unchanged until activation.
Uploads now auto-suggest schema mappings with reranked alternates, extract more from messy statements, and pseudonymize per-account identifiers with dedicated keys. Mapping mistakes stopped looping; label integrity is enforced at ingestion.
B2B responses and consumer streaming replies are buffered through a single gate that enforces grounding checks and PII redaction before any byte leaves the platform.
The forex reference-rate and RBI policy-rate feeds are live-capable with their license bases verified and documented. Feed errors now raise loudly instead of silently serving cached values as fresh.
Each registered model states how it is actually served — trained artifact, heuristic, or mock — and product surfaces can only claim what the registry backs. The transaction categorizer is the first fully trained-and-served model under this regime.
A platform-wide tracing spine landed alongside a human-review SLA breach sweep and a dedicated crisis-event consumer, tightening the loop between detection and human response.
Partners can now view a per-month, per-product usage and cost statement, with a period selector and CSV export. The statement is informational, not a tax invoice; GST-invoice issuance stays gated on separate legal and finance preconditions.
The developer reference now renders a partner-filtered OpenAPI specification, so integrators see only the B2B endpoints in the shipped contract. The page was corrected to match the live B2B surface.
Consent moved from an in-memory store to a durable, audited service with a per-partner grant lifecycle, a partner-scoped access gate, a minor short-circuit, and a mobile approval flow. The DSR erasure cascade covers the new records.
Uploaded KYC documents now persist through a UIDAI masking gate into AES-256-GCM encrypted object storage, with an immutable corrections overlay, forgery-check records, and an audit-event trail. All four tables are covered by the DPDP erasure cascade.
An eleven-PR track shipped p10/p50/p90 quantile forecasts on the Apache-2.0 TimesFM foundation model: trainers, a consumer route behind a consent gate with active erasure, public market-data forecasts, and mobile cards. Production cut-over stays operator-gated.
Every CATALOG model plus the Courtroom, HallucinationCheck and Scribe capability cards now have a public page at /models/[slug]. Each card cites its foundation license, training-data summary, and drift posture.
/meet/saraswati is now /meet/filer, /meet/lakshmi is /meet/saver, etc. The Devi name is retained editorially via Schema.org `Person.alternateName`. Legacy slugs ship a meta-refresh redirect.
Four new top-level routes shipped: /security (DPDP erasure posture, audit HMAC chain, drift guards), /developers (SDK quickstart for Python / Java / Node), /changelog (this page), and /press (downloadable kit).
Sitemap and per-route metadata now emit language alternates once two or more locales ship. Today only English is live; adding another locale fans the alternates out across every URL automatically.
User-state change events are now HMAC-signed end-to-end, and boot-time drift guards lock the materializer's invariants so a regression fails the deploy rather than shipping silently.
Outbox relay now elects a single leader and ships an operator replay tool; observability dashboards gained a view-lag metric.
Scribe's memory extractor now routes through the internal Messages service with strict-schema tool calls and prompt-prefix caching, with a backward-compatible fallback path preserved.
An Anthropic-shape Messages API over our self-hosted Qwen + vLLM cluster shipped dormant behind a feature flag. Signed DPIA, infrastructure capacity, and SDK regeneration remain independent operator gates before activation.
The Anthropic-shape tool-use surface (tools and tool-choice) is accepted by the validator with strict-schema constrained decoding behind a flag. Shipped dormant — no consumer flipped yet.
A follow-up bundle for the security-event normalization pipeline landed: a severity hotfix, hardening, event wire-up, and a four-expert review reconciled before merge.