Changelog

Compare your fiscal year against the last — maturity trajectory, risk flow, follow-through and recorded value — with cross-period pattern detection (recurring risks, score streaks, follow-through debt). Every figure is deterministic arithmetic over your own records; the platform never simulates a past. Pro and above; fiscal year configurable (April–March default).

Freeze a completed fiscal year into an immutable, hash-verifiable snapshot — the year-end record your auditor can verify after export, and that can never be rewritten. Max and Enterprise, admin-only.

Every AI recommendation is now a persisted, owned, priced, time-boxed record with a full lifecycle — regeneration supersedes instead of duplicating, dismissal requires a written reason, and overdue advice escalates automatically to the board-oversight register.

A live, deterministic price on inaction — open risks, stalled initiatives and unactioned recommendations aggregated into one drillable monthly band on the Board Cockpit. No AI computes this number.

The C-suite league table: per executive role, open items, overdue count, oldest age, share of the Cost of Standing Still, and trailing-90-day completion rate.

Every board pack now includes a server-computed follow-through section — issued, actioned, dismissed-with-reason, and ignored recommendations listed verbatim with owner and monthly cost.

What your subscription delivered this cycle — usage, quotas, and consulting-equivalent value with every assumption visible. Available on every tier.

Charters & SLAs, talent ramp, transfer-of-work and value receipts composed into an HQ scorecard, plus the Charter Defense board pack generated at board tier with register figures rendered verbatim.

NRR, GRR and logo churn computed from your own customer book — the same cohort math as the founder cockpit, customer identifiers hashed at rest.

CRO, CMO, Chief Sustainability Officer and General Counsel personas, and the persona lens now covers every module surface.

Vendor, talent and ESG surfaces consolidated behind single front doors with cross-links; governance surfaces renamed to remove duplicate-sounding entries. Every previous URL keeps working.

Secrets can no longer be stored unencrypted under any configuration; connector credentials gain a rotation endpoint, age tracking and KMS envelope encryption.

A stdlib-only Python client at full parity with the TypeScript SDK, kept in lock-step with the API by a CI contract check.

Token-based light/dark/system theming across the app, with a per-user toggle in the dashboard header.

Build, save, schedule and embed your own reports over governed metrics — funnels, cohorts and warehouse sync included.

Concurrent, conflict-free co-editing of core artifacts with presence, comments and @mentions.

Answers over your data now use hybrid retrieval with cross-encoder re-ranking and pass a grounding threshold before display.

Metered usage and automated dunning alongside subscription tiers.

Prompt-injection defence upgraded from a fixed corpus to a continuous, multi-layer red-team program.

OAuth app framework with scoped install/revoke, plus signed, retried outbound webhook delivery.