Changelog

What we shipped.

Every meaningful release in reverse-chronological order. Subscribe to /changelog.xml for an RSS feed.

2026-06-20

Phase 2, stages 1 + 2 are live

Added
  • Self-serve onboarding (welcome → quickstart → success). New users land in a working dashboard with a real key in under 60 seconds.
  • @detecte/cli v0.1.0 — login, init, keys, agents, policies test, logs, scan, status, open.
  • Real-time SSE streams for decisions and incidents. The dashboard now updates live without polling.
  • Anomaly detection v1 — frequency, amount-distribution, and time-of-day signals. Auto-escalation at score ≥ 75.
  • PII redaction. Pass `sensitive: ['recipient', 'ssn']` to verify() and the values are HMAC-hashed before storage.
  • POST /v1/policies/dry-run — test a policy against your last N actions before flipping it on.
  • Webhook delivery retry worker. Exponential backoff over 24h, then dead-letter.
  • Docs site at docs.detecte.xyz with Quickstart, Concepts, SDK reference, and Operators reference.
Changed
  • API key management is exposed at /v1/keys for SDK / CLI use, in addition to the Clerk-authed /v1/internal/keys for the dashboard.
Security
  • Cron endpoints require Authorization: Bearer $CRON_SECRET.
  • Sensitive Vercel env vars rotated; webhook secrets regenerated.
2026-06-15

Phase 1 — General availability

Added
  • @detecte/sdk v0.1.1 — TypeScript SDK with 19/19 tests passing.
  • Marketing site at detecte.xyz with the Crypto & Web3 use case.
  • Dashboard at app.detecte.xyz — agents, policies, incidents, audit, settings.
  • API at api.detecte.xyz — 9 resources, 25 endpoints, Hono on Vercel Functions.
  • 13-table Postgres schema on Neon. Stripe-style HMAC webhook signing.