v0.84.9
August 23, 2026
**The security wave.** Three doors closed in a single pass: webhook responses can no longer drag sensitive data into internal records, AI client registration gets real boundaries — size, quota and lifecycle — and a hostile PDF can no longer slow the platform down.
-
Security
Watertight webhooks
Responses from external endpoints are read with a byte cap and errors no longer carry remote content: a service reflecting sensitive data can no longer copy it into internal job records. Logs keep only the essentials — host and sizes — never full URLs, templates or contents, and work queues get an explicit 7-day retention.
-
Security
Boundaries for AI client registration
Automatic client registration (ChatGPT, claude.ai and the like) now has real limits: a hard cap on metadata size with unknown fields discarded, a registry quota, automatic cleanup of never-used clients after 30 days, and a dedicated administrative delete. Legitimate connectors notice nothing; abuse hits a wall.
-
Security
Hostile PDFs take no hostages
Procedure PDF analysis now runs in a separate process with hard page, memory and time limits: a document built to burn resources degrades only its own request, never the platform. New rate limits and quotas protect storage and capacity.