Changelog
Every release in plain language: new features, improvements, fixes and anything you need to act on.
This release fixes critical issues with contract signing and document tracking, improves how talent profiles display, and strengthens security across the platform. We've also launched a new knowledge center and made the talent discovery experience more reliable.
the nightly job failed 27/27 in silence — make it report, verify and answer for itself
let clients and recruiters ask a candidate for something
make the channels layer tenant-safe, threaded and enforceable
the a11y pass, the phone layout, and a lint gate that was inert
the deferred four, and the bug a browser found
"N open roles for you" — the payoff card gets its data path
"N open roles for you" — the payoff card gets its data path
close the open questions — the Q3 audit, and the two levers named
the host gets a voice, the reminder gets an audience, and four dead paths get a reader
tenant auth handoff, the privacy centre, and observability scrubbing
require a name at the apply door, and never render an anonymous card
the candidate decision log has never accepted a single row
show the applicant's email, and find their CV wherever it lives
show the applicant's email, and find their CV wherever it lives
land the review pass that was left uncommitted in the working tree
commit the generated types for vendor_health and vendor_balance
the tasks function wrote a path into bucket_folder, 404ing every attachment in the webapp
one stale belief about seven columns caused four defects
the candidate video-interview recorder was entirely in English
stop promising a scheduled-report email nothing sends
resolve two post-merge collisions the merge itself could not see
the SNS topic allowlist has never been switched on — make that visible
reject a key that already carries the environment folder
reject a key that already carries the environment folder
skills never loaded — the embed crosses a schema boundary
the four collisions the consolidation itself created
send what the vendor documents, not what we invented
the CSP, the font tracing and the CORS list were all a step from breaking
render the preview in the browser, and remove the extraction scaffolding
the availability line never rendered, and 'fluent' was printed as 'Native'
the jobs table advertised every non-hourly role as a yearly salary
degrade to the graph when no vendor can serve, and a probe script, closes webapp#type-check
track what is LEFT at each vendor, not just cost and spend, closes webapp#type-check
vendor failover, a circuit breaker, and the outage it found, closes webapp#type-check
delete the WhatsApp template fiction and resolve LinkedIn ids properly
record which key signed what, so a void document is knowable
record which key signed what, so a void document is knowable
regenerate types for the attribution column, and catch the Sensitive PLACEHOLDER trap
regenerate types for the attribution column, and catch the Sensitive PLACEHOLDER trap
bound the reminder sweep, and stop post-send edits to signed terms
bound the reminder sweep, and stop post-send edits to signed terms
the admin talent picker could never return a result
the signature-reminder idempotency key was only ever logged
the signature-to-activation path lost contracts silently
the signature-to-activation path lost contracts silently
a failed decline must not tell both parties the contract is dead
a failed decline must not tell both parties the contract is dead
close what the completed audit found in this branch's own work
close what the completed audit found in this branch's own work
prove the key is in production mode, and stop losing signatures
prove the key is in production mode, and stop losing signatures
the mode gate misread DocuSeal's own refusal and would have blocked a good key
the mode gate misread DocuSeal's own refusal and would have blocked a good key
the remediation sweep called every void signature "indeterminate"
the remediation sweep called every void signature "indeterminate"
make "billed for it" and "can reach it" the same question
checkIsAdmin granted platform-admin on bare admin-workspace membership
3 security hardening fixes
the public pages can finally be read by the public
console shell — URL contract, chrome, palette, live hoist
dataset query core, seven descriptors, and the sharePct fix
metric registry, the ACL/sampling migration, and -6 route entries
the console — three surfaces, entity drill, ten pages retired
/boston-2026 — the trip page where you circle a date
the résumé funnel, rebuilt on the shared studio, closes base64-throu#a-Server-Action
five unauthenticated public forms billed HubSpot with no rate limit
the last role-less admin check gated a service-role magic-link minter
the résumé generator was dead in production on every path
media uploads, the freeze-gated maintenance jobs, and the proxy guard
microfrontend boundary, SEO routes, and retiring the old KB
Sentry, the dev-CLI service, and the reader/admin client guard
the authoring console — roles, optimistic locking, review queue
the content API — machine-written drafts that cannot self-publish
bootstrap the first editor without failing empty environments
dev seed — 34 articles across every tier, verified
expose the schema, document it, and gate its access model
search, the public-route view, and the maintenance split
generateStaticParams cannot use a cookie-carrying client
surface PostgREST errors, and record what is actually proven
add the health endpoint the deploy checks actually need
build without a database instead of failing the promote
repoint every internal link the rename could not anchor
sections had no localized title
job-board adapter grid + fix the dead #distribution links, closes #distribution
parallelise the guard pages' reads and give them a loading state
stop the silent writes, and fix two surfaces that could only ever show zero
raise two foreground tokens to AA, and gate the arithmetic
make a verified custom domain actually route for the public
close the four un-audited signup doors, and make the funnel measurable
let a committed migration finish, and pin the seeded-id trap
make dropped email, rejected mail and open rate limits fail loudly
return error CODES from account-facing actions, not English prose
"Skip for now" on the photo step returned to the photo step
keep the skill levels the candidate actually set
let a chat-first signup finish, and stop publish from erasing it
make a successful LinkedIn connect say so, and stop orphaning open cards
make the chat-first conversation actually advance
save the profile correction the candidate just made
stop minting a consent record for terms nobody was shown
stop the client submit from locking an owner out of their workspace
stop the conversation talking over an error it was never told about
the agent writes in the language the candidate is reading
the rate receipt states the rate that was confirmed
harden the auth edge and stop the funnel discarding visitor state
capability layer, chat.post fan-out, and real interview times
the ledger, the seam, and the lifecycle application layer
rebuild the candidate record on the secondary rail
the agent page said "not found" for an agent that exists, and every empty state was a dead end
resolve the undefined design tokens, the AA contrast failures and the missing accessible names, closes #4d7c0f
the apply gate, and the pageless segment that 404'd every KYC link
the backdrop was never visible, the tab bar hid the door time, and every page shipped 1.2MB of copy
ATS domain wizard and careers-page settings
active-filter chips, a funnel that agrees with the board
derive account_type from workspace membership for every persona
link a manually-added candidate to their talent account
staging could not type-check — restore 5 files two unrelated commits deleted, closes webapp#type-check