2026-06-20
Phase 2, stages 1 + 2 are live
Added
- Self-serve onboarding (welcome → quickstart → success). New users land in a working dashboard with a real key in under 60 seconds.
- @detecte/cli v0.1.0 — login, init, keys, agents, policies test, logs, scan, status, open.
- Real-time SSE streams for decisions and incidents. The dashboard now updates live without polling.
- Anomaly detection v1 — frequency, amount-distribution, and time-of-day signals. Auto-escalation at score ≥ 75.
- PII redaction. Pass `sensitive: ['recipient', 'ssn']` to verify() and the values are HMAC-hashed before storage.
- POST /v1/policies/dry-run — test a policy against your last N actions before flipping it on.
- Webhook delivery retry worker. Exponential backoff over 24h, then dead-letter.
- Docs site at docs.detecte.xyz with Quickstart, Concepts, SDK reference, and Operators reference.
Changed
- API key management is exposed at /v1/keys for SDK / CLI use, in addition to the Clerk-authed /v1/internal/keys for the dashboard.
Security
- Cron endpoints require Authorization: Bearer $CRON_SECRET.
- Sensitive Vercel env vars rotated; webhook secrets regenerated.