Updates

Added

• Version index beside the log — on a wide screen, every release is one click away.
• The log inside the workspace — the sidebar opens it without leaving; the dot rests once you have read it.

Improved

• Checkpoints instead of sentences — every entry here leads with what changed, then a short detail.
• Lines of about eighty characters — the log reads at a comfortable width on every screen.
• An unread mark you can see — the dot in the sidebar meets the contrast a small mark needs.

Fixed

• Screen readers hear two words — the dash between checkpoint and detail no longer glues them together.
• An unknown address under updates — answers inside the same frame, with a way back to the log.
• The front page builds without the database — a build the database cannot answer ships the page without the showcase card instead of failing.
• Deploys complete again — the same package no longer reaches Vercel under two paths, which it refused without a word.

Added

• Who can reach which data — a code analysis follows every API route, Server Action and procedure to the database and names where strangers or other customers can reach records.
• Where the money can leak — the same analysis follows checkout and payment webhooks: fake payments, prices chosen in the browser, double credits, cancelled plans that keep paid access.
• A second reading of every finding — an AI reviewer reads the code path behind it and names the line that decides; what it rules out is dropped.
• A cheap pre-check keeps the bill down — a small model rates every finding first; measured against 126 judged findings, it dropped none of the real ones.
• Connect your code from the app page — install the Vallit GitHub App, pick the repository that belongs to the app, disconnect whenever you want.
• Only the repository you pick is read — access is minted for a single check, never stored; only the person who installed it can connect it.

Improved

• Connecting your code is one press — GitHub's own mark, one sentence, one button, three small steps that tick off as you go.

Fixed

• Checks survive a broken code connection — if the repository cannot be read, the website checks still run and the report still arrives.
• GitHub's bad minute stays on the page — picking a repository while GitHub is unreachable says so instead of showing an error screen.
• A rate-limited screening model waits — the cheap pre-check retries, so a busy minute does not send every finding down the expensive path.

Added

• Updates page — every shipped release at app.vallit.net/updates, newest first, with what was added, improved and fixed.
• Version in the sidebar — a dot until you have read the newest release.

Improved

• Checker names its release — requests carry the release number in their user agent, so a firewall rule can name it.
• robots.txt and sitemap — public pages in, workspaces and reports out.

Added

• Counted versions — every change carries a version number, recorded here with what it changed.

Improved

• Honest report — no GitHub fix is offered until it is switched on; the page about it says so and marks its steps "Planned".
• Settings without promises — the settings page lists only what works today.
• Legal links when they exist — Terms and Privacy on the sign-in page once their addresses are configured.

Fixed

• Domain check wording — the stale-record message reads correctly.
• Wrong app link says so — a malformed app address shows "There is nothing here" instead of an error page.
• Settings keep your typing — a refused save leaves the alert address in the field.

Added

• First app in one step — after sign-up the only question is the address; the workspace, alerts, claim and first check follow on their own.
• Take over a report — a stranger's report moves into your new workspace instead of being run again; one someone else owns says so.
• Vallit's own sign-in and sign-up — Google when the instance has it, email with a code or a password, copy that sounds like a person.
• Moments — one calm acknowledgement per event: the first report counting up, a domain confirmed, a setup guide finished.
• What we saw — every finding names what the check observed and how sure we are, before the risk; silent on https but answering on http is "unencrypted", not "down".
• Guardian card — since when an app is watched and every monitor error, not just the first; the operator console shows the guardian's pulse.
• Definitions on every number — a small "i" on the overview and the app page; activity and fix rows lead to the app or the report.
• Vercel Analytics and Speed Insights — production only, report and claim tokens masked; VALLIT_TELEMETRY_DISABLED=1 switches both off.

Improved

• Uptime is one seven-day window — everywhere; the plan card says what the guardian does and what is still missing.
• Daily guardian messages for every alert address — not only for paying workspaces.
• Report-only Content Security Policy — reported as "not enforced yet" (low), not as missing; an empty header counts as absent.
• A second try before "down" — a site that misses the first request is asked once more; answering then is a milder finding.
• Onboarding page weight — 353 KB of our own JavaScript (Clerk must be mounted there); its budget is 360 KB.

Fixed

• One database client per process — every transaction used to open its own and idle for twenty seconds; forty requests opened forty-five backends.
• Public-address guard — refuses only the reserved blocks, no longer all of 192.0.0.0/16 (which includes iana.org).
• App page at 390 px — no horizontal overflow (the grid lacked a minmax(0,1fr) column below lg).
• Small things — a long email stays inside the account row, the Cloudflare token field is full width on a phone, the empty-state glow uses a token.

Not in 1.0

Trial and checkout (Spec C), the AI second opinion (1.1), GitHub-connected repo checks, multi-region workers and enterprise capacity. The platform track in the separate Codex worktree is not part of this release.