Stable version
Changelog
Confidentiality becomes visible, and the certificate separates what it proves from what is asserted
Prices, holders and living people: what leaves in an export is now readable before you send it.
Update
Automatic
Content
Release notes
Added
- Confidentiality indicators in the interface. Prices, holders and locations are confidential by default; the interface shows it instead of assuming it, and a dedicated switch frames personal data.
- Marking an agent as living retroactively cleans provenance already entered. Amounts tied to an identifiable person are removed there and then, not merely hidden from display.
- A confidential work does not exist for a report. Its entry is not redacted: it is not composed at all, which removes the whole class of leaks caused by forgetting one field.
- The certificate separates verifiable facts from declarations. Two distinct blocks: what a reader can recompute — digests, archive membership, each with its method and date — and what the issuer asserts, with who asserts it and when. Never an undifferentiated column of ticks where a computation would lend its weight to an opinion.
- TLS certificate pinning on licence and authentication exchanges.