v0.99.14
October 26, 2026
More precise privacy, more confidential logs and streams: erasure touches only what you specify, rectification no longer writes placeholders over data, script logs no longer reach external agents in clear, and revoked sessions lose their live updates immediately.
-
Security
Personal data erasure only where specified
Erasing a field of a list item, for example the tax code of the second person, no longer wipes the whole list or the history. If a classification or path does not match the data structure, the case is shown as blocked with "Invalid data path" instead of erasing more than intended: fix the classification or select the whole branch. Paths with a bracketed index are rejected immediately with a clear message.
-
Improvement
More reliable data rectification
When you rectify a case with a formula-based title, the title updates right away together with the data, even if the case is completed. If you send back a placeholder in place of a confidential field, the real data stays intact, the field is listed as ignored and, if nothing changes, the outcome is "No changes". Paths crossing a list are rejected with a clear error instead of creating stray keys: for now a list is rectified by replacing the whole field.
-
Security
Script logs kept confidential from external agents
For external agents connected through MCP, the execution log of automatic tasks other than Webhooks shows only the date and time and the truncation flags: message text, attached data and error messages are no longer included, even if the key can read case data. The log stored in the database does not change.
-
Security
Live updates closed when a session is revoked
If you revoke a single session, its live updates close immediately, while the same person's other sessions stay active. The periodic check now also verifies that the session is still valid and within its maximum lifetime.
-
Security
Category access respected by live updates too
When you change a category's access rules, non-admin users stop receiving updates about flows they can no longer see, even if they used to see everything: they get a generic signal, their screens reload, and updates resume only for what they can see. If the check fails, they stay suspended for safety.
-
Improvement
Read-only inventory of data left by past defects
A new read-only operational tool for the installation administrator reports where traces of past privacy defects appear (emptied lists, keys with brackets, misaligned titles, placeholders in data), using only counts and identifiers, showing no personal data and changing nothing.