Changelog

First public release. TrustFlow is live at api.trust-flow.dev.

• Core endpoint — POST /v1/evaluate with 7 risk factors, SCA logic, and per-tenant rules.
• Multi-tenancy — Isolated state, rate limits, and rules per API key.
• Agent identity — Ed25519, HMAC, and JWS verification with trusted issuer registry (POST /v1/identity/*).
• Webhooks — HMAC-SHA256 signed delivery with exponential backoff retry.
• Dashboard — Live metrics, transaction explorer, and rule editor at /dashboard.
• SDKs — Python and Node.js with automatic retries and typed responses.
• Compliance — PSD2/SCA thresholds, full audit trail via trace_id, GDPR data export endpoints.

Closed beta with design partners.

• Added — Stripe billing integration for usage-based metering.
• Added — GraphQL endpoint at /v1/graphql for complex querying of transactions and usage.
• Added — Sandbox keys (tf_test_*) with deterministic responses for CI pipelines.
• Improved — Evaluate p50 latency reduced from 38ms to 22ms.

• Security — Per-tenant trusted issuer registry (previously global). Cross-tenant issuer collisions are now impossible by construction.
• Improved — Signup is rate-limited per IP (5/hour, 10/day) to prevent enumeration attacks.
• Added — API key rotation at POST /v1/auth/rotate with 5-minute grace period for old key.
• Added — HSTS, CSP, and strict CORS in all responses.

• Added — Batch evaluate at POST /v1/evaluate/batch (up to 100 transactions per call).
• Added — Rules engine with custom conditions: amount ranges, category allowlists, time-of-day, velocity buckets.
• Added — SSO via SAML/OIDC for the dashboard (enterprise plan).
• Improved — Audit log retention extended to 90 days on the Pro plan.

• Added — Webhook delivery engine with HMAC-SHA256 signing and 5-retry exponential backoff.
• Added — Events: transaction.evaluated, transaction.declined, sca.required, rule.triggered.
• Added — Circuit breaker per webhook — auto-disables after 5 consecutive failures.

• Added — Agent identity verification: Ed25519 signing, JWS (RS256/ES256/EdDSA), HMAC-SHA256.
• Added — Risk bonus for verified agents (score reduction scaled by issuer trust).
• Added — Built-in SDK helpers for signing canonical payloads (sdk/trustflow/agent_identity.py).