Changelog

• Hosted, signed delivery URLs for SellAuth and Komerza dynamic delivery.
• Product and variant mappings issue a license per purchased unit and replay the same keys on retries.
• One-time integration secrets stored as AES-256-GCM ciphertext.

• Webhook endpoints that deliver signed JSON events for license issuance, changes, activations, and suspension.
• HMAC-SHA-256 request signatures with timestamp replay protection, and secrets shown once and stored encrypted.
• Automatic retries on a 30s/5m/30m/3h/12h schedule, a dead-letter state, and one-click replay from the dashboard.
• SSRF-safe delivery: HTTPS in production, redirects refused, and only publicly routable addresses dialed.
• A webhooks dashboard with delivery history, secret rotation, and an SDK helper to verify incoming requests.

• Offline-lease policy terms copied onto licenses at issuance, with a configurable TTL.
• A runtime lease endpoint that requires an active device and returns an Ed25519-signed payload.
• A TypeScript SDK verification helper over canonical JSON with WebCrypto.

• Product and customer detail pages with direct licensing actions.
• Structured entitlement editors replace raw JSON in policies and licenses.
• A full documentation set covering quick start, authentication, the API, errors, licenses, activations, the SDK, and security.
• Real product, pricing, trust, changelog, contact, terms, and privacy pages.

• Reusable license policies with duration, activation limits, grace, and default entitlements.
• Policy terms are copied onto licenses at issuance.
• Dashboard coverage for overview, licenses, products, policies, customers, activations, API keys, audit, and settings.

• Scoped secret API keys with one-time reveal.
• Idempotency keys for product, policy, and license mutations.
• OpenAPI 3.1 document and zero-dependency TypeScript SDK.

• Products, license lifecycle, device activations, and runtime validation.
• Ed25519-signed runtime responses and published signing keys.
• Tenant isolation with PostgreSQL row-level security.

Billing and email invitations are the next major areas. The changelog is updated when a capability is usable, not when it is designed.