Skip to content

CHANGELOG.md

Latest commit

 

History

History
64 lines (47 loc) · 2.33 KB

CHANGELOG.md

File metadata and controls

64 lines (47 loc) · 2.33 KB

Changelog

All notable changes to the LumaTrace Cloud API and Developer Portal are documented in this file.

The format follows Keep a Changelog principles. This project adheres to Semantic Versioning.

[1.2.0] - 2026-02-27

Added

  • Compliance: Published EVIDENCE_PACK_SUMMARY.md to provide public visibility into SOC2/ISO controls, pentest status, and SBOM generation.
  • Integration: Released examples/smoke_test.sh as an Enterprise Quick Validation Kit for rapid API onboarding and testing.
  • Operations: Defined explicit Performance Envelope and operational limits (SLOs, QPS, latencies) in the SLA documentation.

Fixed

  • Documentation: Corrected broken cross-references in SUBPROCESSORS.md to accurately point to the Enterprise Data Privacy Policy.

[1.1.0] - 2026-02-27

Added

  • Security: Formalized Machine-to-Machine (M2M) OAuth2 authentication profile in OpenAPI spec.
  • Forensics: Extended VerificationResponse with c2paStatus, watermarkStatus, and tamperClass for automated SOC/SIEM decision-making.
  • Governance: Added Idempotency-Key dynamic support for /api/v1/photos/register in Postman collections.
  • Standardization: Adopted RFC 7807 for standardized API error responses (ApiError schema).

Changed

  • Limits: Explicitly unified operational limits across documentation and schemas (25MB payload, 16MP resolution).
  • Documentation: Integrated "Analog Hole Mitigation" narrative into the main repository README.

Fixed

  • Discrepancies between architectural documentation and OpenAPI schema regarding image resolution limits.

[1.0.0] - 2026-02-26

Added

  • Public Developer Portal initial release
  • Interactive OpenAPI specification (openapi.yaml)
  • Defined API contracts for:
    • /api/v1/auth/login
    • /api/v1/auth/logout
    • /api/v1/auth/register
    • /api/v1/photos/protect
    • /api/v1/photos/verify
  • Python and Node.js integration examples
  • Official Postman collection for enterprise testing
  • Publication of governance documentation:
    • ARCHITECTURE.md
    • SECURITY.md
    • DATA_PRIVACY.md
    • API_LIFECYCLE.md
    • ASSURANCE.md

Security

  • Defined strict multi-tenant isolation requirements for JWT-scoped interactions
  • Introduced pre-flight validation rules:
    • Maximum upload size: 25MB
    • Maximum resolution: 16 Megapixels