All releases
v2026-07-28
July 28, 2026
Patch
In this release
New6
Fixed11
Total17

aggregate per-vendor per-tier success-rate telemetry

aggregate per-vendor per-tier success-rate telemetry migration-ledger drift detection - reconciliation + content_hash verification restore 2 of ~11 blog posts as new forward content DR script guards, TOCTOU close, and legacy-sidecar restore coverage announcement CTA model residue — userinfo threat model + PublicCTA length parity

New Features

6

aggregate per-vendor per-tier success-rate telemetry

aggregate per-vendor per-tier success-rate telemetry

migration-ledger drift detection - reconciliation + content_hash verification

migration-ledger drift detection - reconciliation + content_hash verification

restore 2 of ~11 blog posts as new forward content

restore 2 of ~11 blog posts as new forward content

fail loudly on missing support-inbound credentials at startup

fail loudly on missing support-inbound credentials at startup

extend staleness-probe to antibot_hint cold-start engine-profile fallback

extend staleness-probe to antibot_hint cold-start engine-profile fallback

surface active and scheduled maintenance on /status

surface active and scheduled maintenance on /status

Bug Fixes

11

DR script guards, TOCTOU close, and legacy-sidecar restore coverage

DR script guards, TOCTOU close, and legacy-sidecar restore coverage

announcement CTA model residue — userinfo threat model + PublicCTA length parity

announcement CTA model residue — userinfo threat model + PublicCTA length parity

route cold-start antibot_hint fallback through shared vendor_engine

route cold-start antibot_hint fallback through shared vendor_engine

resolve announcement CTA href residue from

resolve announcement CTA href residue from

unvalidated input and missing startup validation — 3 fail-loud-before-use gaps

unvalidated input and missing startup validation — 3 fail-loud-before-use gaps

per-domain concurrency gate is a third, unaccounted-for min_tier consumer

per-domain concurrency gate is a third, unaccounted-for min_tier consumer

stop 10 error-trigger.sh checks from silently skipping on cloud provider

stop 10 error-trigger.sh checks from silently skipping on cloud provider

Default POSTGRES_DB=alterlab / POSTGRES_CONTAINER=alterlab-postgres match production

Default POSTGRES_DB=alterlab / POSTGRES_CONTAINER=alterlab-postgres match production

retry unclassified origin 5xx via proxy, stop false WAF attribution

retry unclassified origin 5xx via proxy, stop false WAF attribution

container-ro fails closed when jq is missing, not silently open

container-ro fails closed when jq is missing, not silently open

polish — declarative patch validation, cancel endpoint, audit-field docs

polish — declarative patch validation, cancel endpoint, audit-field docs