v0.86.8
September 4, 2026
**Provable trust:** deletions with verifiable proof, crash-proof extraction delivery, a hardened AI boundary and credential-free exports — a release entirely dedicated to security and reliability.
-
Security
Deleting means proving
Every file now carries the exact identity of its storage, fixed at upload time: deletions and verifications use only that. On versioned storage all versions are removed — or the system says so openly, never inventing a certificate. With minimal cloud permissions, attestation degrades to a simple warning: no operational blocking.
-
Security
A hardened AI boundary
Document content reaching the assistant is wrapped in unpredictable markers and cleaned of invisible characters; with Data Shield on, text never reaches AI providers on any path; and a document excluded from agent context can no longer be reached even as a link. The assistant's history keeps provenance placeholders, not document copies.
-
Security
Exports without secrets
Exported flows no longer carry credentials (automatic redaction) and import rejects files containing them in cleartext. Internal templates and version diffs stay complete: the boundary is the file leaving the system, not your daily work.
-
Improvement
Extractions that never get lost
Text-extraction delivery is now transactional, resuming automatically after interruptions and giving up explicitly when attempts are exhausted: no more silently stuck jobs, and health metrics now see what was previously invisible. Authorizations are re-checked up to the last moment before touching storage.