Changelog

Scan intake

Authenticated upload and repository-URL scan intake is live now; scans queue as durable jobs.

AI-origin detection (all 47 signal types)

AI-origin scoring, stylometric evidence, and explainable confidence reports are rolling out behind the queued analysis workflow.

Policy engine (log & warn actions)

Define provenance rules for review today; automated log and warn actions are rolling out behind the queued analysis workflow.

SOC 2 compliance reports

Audit-ready compliance reports are rolling out in phases alongside generated analysis results.

Dependency lineage mapping (npm, PyPI, Maven)

Repository and archive scan requests are tracked now; transitive npm/PyPI/Maven lineage graphs are scheduled for the analysis-worker phase.

Policy engine (block & require-review actions)

Automated block and require-review enforcement is planned for the worker-backed policy phase.

EU AI Act & GDPR compliance reports

EU AI Act and GDPR reporting is planned for a future compliance-reporting phase.

SBOM generation & validation

SBOM generation and validation is planned for a future analysis-worker phase.

SLSA Level 3 provenance attestation

SLSA Level 3 provenance attestation is planned for a future phase.

SSO / SAML (Okta, Azure AD, Google)

SSO/SAML is planned for a future enterprise phase.

HIPAA compliance reports

HIPAA compliance reporting is planned for a future phase.

Slack & webhook integrations

Slack and webhook integrations are planned for a future phase.

Real-time monitoring & drift detection

Webhook-driven ingestion, drift detection, and alerting are planned for a future phase.

Enterprise deployment (SCIM, log streaming, single-tenant VPC)

SCIM provisioning, audit log streaming, and single-tenant VPC deployment are planned for a future enterprise phase.