Changelog

This page tracks notable platform changes. Entries are grouped by quarter. The most recent appears first.

2026-Q2: Public dev portal and OpenAPI v2

Public developer portal launched at docs.darwinevolution.io, with Quickstart, Concepts, Tracium API surface, and Glossary.
Auto-generated OpenAPI v2 reference, rendered from the live spec with try-it-out interactivity.
Sign-In with Ethereum (SIWE) added as a first-class authentication method alongside JWT bearer and API keys.
Sandbox program opened to qualified evaluators with pre-loaded demo datasets across food, automotive, and textiles.
Process-scope grants exposed in the JWT, so operators can be authorized for a single process without unlocking the full process map.

Cryptographically verified webhooks for event.recorded and nft.created, with X-Webhook-Signature header and per-subscription secret.
Retry queue with exponential backoff and per-delivery audit trail exposed via GET /api/v1/webhooks/:id/deliveries.
New CRUD endpoints for tenant admins to create, list, update, delete, and test webhook subscriptions.
Public verification examples in Node.js and Python published to the dev portal.

Production bridge from captured events to an immutable ledger, anchoring on Polygon PoS as the L1 plus an OP Stack L2 for high-throughput batches.
External audit completed on the 13-contract suite (identity, process, templates).
Custody-transfer flow extended end-to-end with on-chain proofs and off-chain signed documents.
Recall-impact analysis exposed via GET /api/v1/nfts/:tokenId/recall-impact.

Captia released with offline-first sync: client-generated idempotent UUIDs, durable local queue, automatic retry on reconnect.
Digital evidence support across captures (photos, geolocation, timestamped operator signature).
IoT ingestion via MQTT brokers added alongside CSV, Excel, and EPCIS 2.0 file imports.
Multilingual capture interface (es / en / pt-BR) for cooperatives and smallholders.

Per-organization decentralized identifiers (W3C DID) exposed across the platform, with on-chain anchoring of tenant and organization identity.
Granular role-based access control: Operator, Admin, Auditor, Compliance, plus tenant-admin scopes.
Tenant-scoped JWT with refresh tokens and partial / select-tenant flow for users with multiple memberships.
Tenant-scoped API keys for backend integrations.

First standardized event layer compatible with FSMA 204 critical tracking events and key data elements.
EPCIS 2.0 mapping for ObjectEvent, AggregationEvent, and TransformationEvent.
Initial regulatory mappings for FSMA 204 and the EUDR Due Diligence Statement.
Canonical JSON event schema with hash-anchored proof for downstream verification.