Changelog

2026-09-07

Added product information revisions with full snapshots, changed-field summaries, SHA-256 hash links, row-version concurrency and public provenance.
Added circularity, technical-performance, durability, substances-of-concern, environmental-footprint and supply-chain fields.
Added revision-based model cache validation while preserving no-store serialized scan results.
Added safe narrative formatting, complete country selection, international phone controls and contained mobile account-menu scrolling.

Added Digital Product Passport create, update, publication, and deletion endpoints.
Added asynchronous serialized batches, batch-scoped packaging CSV, and per-unit QR output.
Added unit identity state, warranty, lifecycle history, and separate product scan analytics.
Added versioned product-passport and product-identity scan automation events.

Moved hosted QR assets from the API host filesystem to private MinIO object storage.
Added inline, range-enabled PDF delivery so direct menu PDFs open in the scanner's viewer.
Corrected local image thumbnails and conditional center-initial validation in the builder.
Added a Build 45 asset-volume migration command and least-privilege production storage policy.

Added secure PNG, JPG, and passive-PDF uploads for hosted paperless pages.
Added restaurant/salon menu, product-information, and memory payloads and templates.
Added tenant-bound asset ownership, subscription-protected delivery, abandoned-upload cleanup, and interactive page typography/colour controls.

Published the restricted QRalto public API v1 specification.
Added the browser API console with non-persistent credentials.
Documented API scopes, subscription enforcement, correlation IDs, and server timing.
Required MFA plus password re-authentication for API-key creation and revocation.

Breaking API changes will be published here before they take effect. The current stable base path is /api/v1.