Changelog
What we shipped.
Every commit, live from the main branch. 30 in the last 14 days. Stamped in Aqaba time, rebuilt hourly.
Live feed
main · last 14 daysSaturday, July 410 commits · Aqaba time
- fixportalstop /portal/login returning 503 (#621)5d83f88
- fixapplystop Turnstile widget remount/re-challenge loop (#619)335e429
- featfunneltracked /go/* CTA redirects — record every WhatsApp/email intent before exit (#615)57d7554
- featwebhookswire lead.created handler to persist+notify (100x gapkill 2026-06-24) (#610)dc68592
- featdashboardwave-2 staff dashboard skeleton (flag-gated, read-first) (#616)490c405
- fixcire-arm security-audit Slack paging via bot token chat.postMessage (#614)c785288
- fixscriptsswap dead live.steadywrk.app to steadywrk.app in cohort link scripts (100x gapkill 2026-06-24) (#612)40f621d
- fixguidecorrect Buffer env key to BUFFER_API_TOKEN (100x gapkill 2026-06-24) (#611)ac0759f
- fixfunnel+seogate-denial fallback links, 301 old pSEO scheme onto flat URLs, open /lab crawl (#609)6a2f8c8
- choreremove vercel drift (#608)a8dd5a4
Thursday, July 212 commits · Aqaba time
- otherarseo(ar): crawler-visible <html lang=ar dir=rtl> via dual root layouts (#595) (#607)7d78bda
- fixciunbrick keyless-Turnstile form submits + mobile hamburger locator in Playwright (#604)0d604e7
- other#510deps(#510): unify zod on v4 across published packages (#603)5b5d0f3
- sec#502dual-accept static bearer — activate BRAIN_STATIC_BEARER without breaking fleet callers (#601)4be5add
- fixanti-driftderive /ai-takeover terminal metrics from canonical source; disable vestigial Vercel git deploys (#600)05019c6
- chorestranded-work ledger — branch/stash/worktree audit 2026-07-02 (#606)8ea4535
- fixrepair judge-layer miscalibrations in Aqaba stage 2/3 variant banks (#598)b9defa3
- fixauthstaff routed to applicant view — verified-email employee resolution + unblock main's red build-and-lint (#599)ea63f25
- fixagency-found UI/SEO/LCP remediation (invite CTA, AA contrast, /ar hreflang, BlurFade LCP) (#584)c88f0ea
- featassessmentper-candidate evolving-oracle moat — seeded variants + chain-grading judge (INERT: v1-default, version-gated) (#596)166dee0
- otherRevert "fix(seo): render Arabic html attrs server-side (#593)" (#594)c819b46
- fixseorender Arabic html attrs server-side (#593)421143b
Wednesday, July 18 commits · Aqaba time
- fixverifyrouting-layer 307 for /verify/<serial> deep-link1d034dc
- fixevalsserve qualitative formatted.* provider/state posture, not the retired raw ints9d2cd52
- fixassessment+surfacesclose red-team HOLD-BLOCKING findings before candidate sende46ad47
- fixseoresolve #software @id price conflict, absolute hreflang, escape < in JsonLd (#557)792edaa
- fixsurfacesharden candidate-probed surfaces — verify UX, a2a reachability, oracle/judge input9ed1ef4
- fixassessmentLLM-judge multi-provider (Groq/OpenAI/xAI) — Anthropic key out of credit; keeps deterministic fail-safeb33d1e5
- featassessmentgated flex-PDF assessment engine — portal + oracle + Trust Rail4f3ebd0
- otherRevert "feat(assessment): gated flex-PDF assessment engine — portal + LLM-judged oracle + Trust Rail"09766c5
Milestones
wavesv0.8.0April 15, 2026Feature
Phase 6 — /prove-it · Trust surfacing · MCP manifest · Audit-log feed
- /api/mcp manifest endpoint — advertises com.steadywrk/mcp-dispatch ahead of G0 registry publish
- /status page — public platform status with live health probe, build hash, metrics version, deploy age
- /ai.txt — AI-agent manifest companion to /llms.txt
- /api/audit-log — append-only public feed of phase-gate receipts
- Footer Trust column — 7 trust surfaces + status + openapi + llms surfaced from every page
- Homepage Hero "Talk to Us" CTA now routes to /demo (was /contact) — higher-intent path
- /api/health reflects manifest-only MCP status + registry pointer
- GH Actions billing runbook (docs/GH-ACTIONS-BILLING-RUNBOOK.md) — 3 unblock paths
v0.7.0April 13, 2026Feature
Wave 7 — Agentic Control Plane · MCP · Public Evals · Trust Pack
- 7 public routes: /control-plane, /security, /system-card, /evals, /developers, /ai-policy, /dispatch-engine
- @steadywrk/mcp-dispatch npm package — 3 tools (dispatch.quote, dispatch.order, dispatch.evals)
- @steadywrk/sdk (TypeScript) + steadywrk (Python) SDK packages
- OpenAPI 3.1 spec at /openapi.yaml · MCP manifest at /mcp.json
- Live machine-readable evals at /api/dispatch/analytics/evals (30-day rolling window)
- Canonical metrics enforcement — verify:metrics gate fails build on drift
- Phase-gate CI — autonomous sprint execution with .sirius/receipts/ durability
- Trust Pack v1 — subprocessors JSON, data-flow diagram, security headers audit, RFC 9116 security.txt
- 5 ADRs documenting architecture decisions from Sprints A–D
v0.6.0April 11, 2026Security
Wave 6 — Maestro canon + edge hardening
- Maestro canon wired into the brain API — one source of truth for voice and governance
- Edge hardening — upstream infrastructure headers normalized at the boundary
- Layered request-integrity defenses across the API surface
- Provenance watermarking — provable origin if AI content is republished
- Anomaly detection on agent-facing endpoints
Stay in the loop
Every commit on the main branch rolls up here within an hour. Follow along at steadywrk.app or check back anytime.