v0.86.1
August 31, 2026
**Document storage hardened:** an independent security review of the new document subsystem, with every relevant issue closed before production activation.
-
Security
Concurrency under control
Every critical action in the document and upload lifecycle — complete, cancel, expiry, definitive deletion, restore — now has **exactly one winner** under concurrency: no double quota counting, and a physical deletion can no longer hit a freshly restored document. The nightly reconciliation also applies its corrections without losing uploads completed meanwhile, and automatically frees orphaned space reservations.
-
Security
Personal upload sessions
An upload session belongs to whoever created it: no other tenant user can continue or cancel it (an administrator can step in to unblock). Session creation now verifies the item really belongs to the declared flow, and the idempotency key is per user.
-
Security
Remote operations faithful to their provider
Every copy or deletion on storage carries the identity of the provider it was created under: switching the default provider can no longer redirect pending operations to a different bucket. Operations interrupted by a restart resume on their own, and credential rotation takes effect immediately, no restart needed.
-
Improvement
Guide kept aligned
The **Documents** and **API & integrations** chapters document the new behaviours: personal sessions, new error codes, extended reconciliation.