What shipped.
One line per change you would notice — in the admin, in the audit chain, or in what the API refuses.
One line per change you would notice — in the admin, in the audit chain, or in what the API refuses.
| New | Process analytics: time to complete, how much of each process runs itself, where runs wait, and how often a gate misses its limit. |
| New | Time limits on gates run inside the durable workflow too, not only in the scheduled check. |
| New | The admin uses the same light Ledger design as this site; the audit chain status sits in the top bar and starts as “not verified”. |
| Security | Removing someone from a company ends their access to it at once; the sign-in limit counts each client separately. |
| Fixed | Migrations report every error instead of continuing silently. |
| New | The admin shows only your company’s processes: build one on the canvas, import BPMN or JSON, or describe it and review the draft. |
| New | Time limits on gates are enforced: a missed limit is recorded in the audit chain and the roles on the step are notified. |
| New | The audit chain records every governance change — processes saved and imported, connectors, roles, sign-ins — in the same transaction as the change. |
| Fixed | Resuming a run reuses the steps it already ran; an irreversible step is never called twice. |
| Security | Connector tokens are write-only and never returned by the API; only owners and admins change connectors. |
| New | Separation of duties: one person cannot sign two gates of the same run. |
| New | The sign-off queue, sorted by deadline; each card says who may sign and shows the run’s audit record. |
| New | Every run is pinned to the exact graph it started on, by hash. |
| New | Processes export and import as hash-checked JSON and lossless BPMN 2.0. |
| Fixed | A gate can be signed only by someone allowed to approve it, and never without its audit entry. |