Changelog
What changed, and when
Curated from the ledger’s tracker since the first commit on 2026-08-05. Audit rounds are listed alongside features and fixes, because a finding is a change too.
Entries
Newest first
2026-09-05
audit
Second-pass audit of the fixes
The fixes themselves were treated as claims to falsify; four further findings, the last closed on the fifth. Every error the service returns, from the application, the framework or the edge, now uses one format.
2026-09-05
docs
New website
This site: multi-page, documentation as first-class pages, the assurance area, and the readiness-for-service mapping.
2026-09-04
audit
Forensic audit series
Eight findings across the retry protocol, settlement of frozen accounts, request size limits and background maintenance. All fixed the same day.
2026-08-25
feature
Balances at any past moment
The balance of an account as it stood at any earlier time, on either the effective or the recorded clock.
2026-08-23
feature
Ledgers for your own clients
Partners can create isolated ledgers for their clients, issue and revoke their keys, and suspend and restore them.
2026-08-22
feature
Credentials issued by the company authorisation service
The ledger no longer holds any secret capable of minting a credential it would accept.
2026-08-22
feature
Accounts are floored at zero by default
An account created without a floor is now floored at zero rather than unbounded.
2026-08-22
feature
Metering, machine-readable contract, documentation
Usage metering per tenant, the OpenAPI document and the agent contract served publicly, and the first guides.
2026-08-14
ops
Service moved to its production host
The service now runs on its production host against the production database.
2026-08-13
fix
Background totals can never skip an entry
The pre-production bug hunt found that a background total could permanently skip entries under a specific timing. Fixed with a visibility rule and a probe.
2026-08-07
audit
No-trust audits, rounds one and two
Thirty-three findings across two rounds that treated every previous sign-off as a claim to falsify. All fixed and guarded by permanent probes.
2026-08-06
audit
Gates B, C and D signed off
The money path, the background workers and the readiness gate, each signed off by the independent internal auditor after the fixes were re-verified.
2026-08-06
audit
Mission-critical certification
Zero code findings against the main branch; one operational finding resolved before sign-off.
2026-08-05
feature
Foundations
The normative database definition, the migration packaging, and the first certification probe gate.
2026-08-05
audit
Gate A refused, then passed
The first audit gate found eight defects on its first pass, four of them blocking. All were fixed and the gate passed on re-audit.
If pricing is ever introduced, it will appear here and on the pricing page first.