Changelog
What changed, and when
Curated from the ledger’s tracker since the first commit on 2026-08-05. Audit rounds are listed alongside features and fixes, because a finding is a change too.
Entries
Newest first
2026-09-05
audit
Second-pass audit of the fixes
The fixes themselves were treated as claims to falsify. Four further findings came out of it, and the last closed on the fifth. Every error the service returns, from the application, the framework or the edge, now uses one format.
2026-09-05
docs
New website
A multi-page site with documentation as first-class pages, an assurance area and the readiness-for-service mapping.
2026-09-04
audit
Forensic audit series
Eight findings across the retry protocol, settlement of frozen accounts, request size limits and background maintenance. All fixed the same day.
2026-08-25
feature
Balances at any past moment
The balance of an account as it stood at any earlier time, on either the effective or the recorded clock.
2026-08-23
feature
Ledgers for your own clients
Partners can create isolated ledgers for their clients, issue and revoke their keys, and suspend and restore them.
2026-08-22
feature
Credentials issued by the company authorisation service
The ledger no longer holds any secret capable of minting a credential it would accept.
2026-08-22
feature
Accounts are floored at zero by default
An account created without a floor is now floored at zero. Before this change it was unbounded.
2026-08-22
feature
Metering, machine-readable contract, documentation
Usage metering per tenant, the OpenAPI document and the agent contract served publicly, and the first guides.
2026-08-14
ops
Service moved to its production host
The service now runs on its production host against the production database.
2026-08-13
fix
Background totals can never skip an entry
The pre-production bug hunt found that a background total could permanently skip entries under a specific timing. Fixed with a visibility rule and a probe.
2026-08-07
audit
No-trust audits, rounds one and two
Thirty-three findings across two rounds that treated every previous sign-off as a claim to falsify. All fixed and guarded by permanent probes.
2026-08-06
audit
Gates B, C and D signed off
The independent internal auditor signed off the money path, the background workers and the readiness gate after the fixes were re-verified.
2026-08-06
audit
Mission-critical certification
Zero code findings against the main branch, and one operational finding resolved before sign-off.
2026-08-05
feature
Foundations
The normative database definition, the migration packaging, and the first certification probe gate.
2026-08-05
audit
Gate A refused, then passed
The first audit gate found eight defects on its first pass, four of them blocking. All were fixed and the gate passed on re-audit.
If pricing is ever introduced, it will appear here and on the pricing page first.