CHANGELOG
Versioned API behavior and customer-facing product changes belong here. Breaking changes will be announced before they are required.
Added accessible copy controls to every available product contract, generated cURL commands that read keys from an environment variable, copyable REST and MCP quickstarts, and privacy-preserving per-product copy attribution. Private-preview invocation examples remain access-gated.
Added a correctly sized, lightweight AP Control Labs share card, complete Open Graph and Twitter metadata, a web-app manifest, and a public RSS feed for product and reliability updates.
Added dedicated construction-subcontractor, multi-location franchise, and procurement-agent guardrail pages with workflow boundaries, composed controls, structured search metadata, and privacy-preserving solution-view attribution.
Published the standard well-known security contact, reporting policy, canonical location, and expiration date, plus clear instructions that prohibit destructive testing and the inclusion of customer data in an initial report.
Replaced static deployment labels with fresh API, database, and worker-heartbeat checks, a JSON status endpoint, measured readiness time, and an explicit reminder to verify asynchronous work at the job level.
Added automated WCAG A/AA and mobile-overflow scans for key public pages, fixed contrast failures in dark panels and code examples, and published an accessibility statement and feedback path. The check now runs in CI on every release change.
Added product-specific JSON requests and representative responses to all 21 available API pages. Invite-only preview pages now keep invocation examples access-gated while preserving their public contracts and security boundaries.
Added a dedicated marketplace page, plan comparison, one-click buyer actions, and product-level RapidAPI links for all 16 controls sold there. Marketplace views and outbound clicks are recorded as privacy-preserving funnel events.
Published the live remote MCP server on Smithery with all 32 typed tools, a customer-secret API-key mapping, and a public product page. Added a compatibility regression test after the production scanner exposed an invalid top-level output schema.
Published a marketplace-safe contract for all 16 synchronous finance and operations controls, with capped plans, pseudonymous customer isolation, deterministic examples, and read-only safety boundaries. Added a public marketplace guide and consistent endpoint names.
Added public, importable Postman and n8n examples with live endpoint URLs and placeholder credentials, direct links from the documentation and agent-readable site index, plus structured organization and website metadata.
Completed the public roadmap with ten available REST and MCP controls for vendor identity and onboarding, tax-form completeness, sender-domain review, quote comparison, contract candidate obligations, certificate expiry, remittances, bank-statement normalization, and reconciliation. Each is tenant-scoped, auditable, and read-only.
Added five available, synchronous REST and MCP controls for NetSuite/QuickBooks bill preflight, construction subcontractor invoices, freight invoices, multi-location franchise duplicates, and procurement-agent proposals. Each operates only on customer-supplied data, returns deterministic evidence, and never connects to or writes to an external system.
Added invitation-only invoice line normalization, explainable risk scores, purchase-order extraction, and PO amendment diffs. These APIs remain access-gated while we validate customer workflows.
Added the public catalog, product documentation, security and status pages, plus available APIs for extraction, validation, history search, and remittance-change detection.
Added read-only two-way and three-way invoice, purchase-order, and receipt matching with line-level evidence.