Changelog

Keep-a-Changelog format. Canonical highlights of each tagged release.

This page is the canonical list of tagged releases (1.0.0 and later), in Keep-a-Changelog format. For week-by-week project progress, see the separate public feed:

• Weekly changelog covers what shipped each Friday.

Tagged-release highlights are below.

1.1.0, 2026-04-22

Pilot-readiness release.

Added

• Python SDK (cohesion-sdk on PyPI).
• TypeScript SDK (@cohesionauth/sdk on npm).
• OpenAPI 3.1 spec at /openapi.json and interactive playground at /api-docs/playground/.
• Postman collection.
• 7 integration examples.
• Customer dashboard at dashboard.cohesionauth.com.
• Status page at /status.
• Developer docs at /docs/ (this site).
• MCP server v1.1.1 preview stubs (not yet functional).
• Trust & Compliance Pack (DPA, DPIA, SOC 2 runway doc, incident-response runbook, Art 14 mapping).
• CI workflow with SBOM generation and gitleaks scan.

Changed

• Documentation now centralized under /docs/ instead of scattered READMEs.

Deprecated

• api_key body field deprecated 2026-04-17, sunset 2026-07-15. Use X-API-Key header.

1.0.0, 2026-04-17

Baseline release: original 13-endpoint surface, peppered SHA-256 keys, 80 ms auth timing floor, two-layer rate limit. (Surface area has since grown to 50 endpoints across eight categories; see additive-authorization stack in scoring-api/CLAUDE.md and entries below.)

Next step

• Versioning for deprecation policy.