Reviewed source export adds verified TLS mail, encrypted outbox, mailbox verification and password reset protocols. Preserve public ancestry; omit local development history and operational queue. Consumer deployment and inbox delivery proof remain separate.
This commit is contained in:
+10
-1
@@ -2,11 +2,20 @@
|
||||
|
||||
# Changelog
|
||||
|
||||
## Unreleased
|
||||
## v0.1.0-preview.28 — 2026-09-11
|
||||
|
||||
- Add bounded single-recipient SMTP with verified TLS, a fixed sender and
|
||||
secret-free diagnostics, plus an explicit encrypted SQLite transactional outbox.
|
||||
Cover cancellation, retry/lease recovery, idempotency and payload expiry locally.
|
||||
- Add optional verified-mailbox, both-mailbox address-change and password-reset
|
||||
protocols with a separate explicit SQLite migration, atomic audits/mail intent,
|
||||
session/credential/replay checks and preserved passkeys, ownership and history.
|
||||
Consumer HTTP/UI integration is locally verified; deployment and real delivery
|
||||
proof remain separate consumer checkpoints.
|
||||
- Document and test optional CMS classification and relationships, including
|
||||
unclassified publication and clearing associations with preserved history.
|
||||
No runtime behavior or schema change.
|
||||
- Keep the existing passkey algorithm regression tests in the public export.
|
||||
|
||||
## v0.1.0-preview.27 — 2026-09-10
|
||||
|
||||
|
||||
Reference in New Issue
Block a user