What shipped, when.

v0.3.0

30 August 2026

License-clean face engine

• New `clean` engine backend: YuNet detection + AdaFace IR-50 recognition, MIT/Apache-2.0 licensed end to end — commercially deployable, including self-hosted, with no third-party model agreement.
• Verified on the full LFW View-2 6,000-pair protocol: EER 3.05% with zero detection failures, versus 3.23% and 19 failures for the research-licensed default it replaces.
• Detection letterbox upscale capped at 2.0× with cubic resize, giving Rust/Python per-pair score parity (median cosine delta 0.002).
• Website latency claims replaced with measured figures (shared cloud tier ~0.7s; <200ms on dedicated hardware).

v0.2.14

15 August 2026

Test-mode keys, DSAR export, account email

• Test-mode API keys for integration work; account email plus low-balance notifications.
• DSAR data export and API-key self-management in the console.
• Payment idempotency for Dodo top-ups; supply-chain checksums and cargo-deny in CI; inference moved off the async reactor; PII redaction in logs.

v0.2.11–13

13 August 2026

Security hardening series

• v0.2.11: production CORS locked to an explicit origin allowlist.
• v0.2.12: SSRF egress allowlist on outbound webhooks, 5xx body sanitization, AML-reload guard, signup rate limiting keyed to the real client IP.
• v0.2.13: concurrency fixes — hosted-link drain cap, single-use liveness claims, first-key mint race.

v0.2.10

13 August 2026

First real-data accuracy calibration

• First full LFW evaluation of the production engine; match_threshold recalibrated 70 → 55 — the old default cost 27.9% FNMR and bought no measurable security.
• Container memory cap for the production deployment.

v0.2.9

12 August 2026

Capture attestation

• Hardware capture attestation: offline Apple App Attest verification and Google Play Integrity ingestion, feeding the injection-risk signals.

v0.2.8

10 August 2026

Tenant webhooks, retention and workflows

• Per-tenant settings and HMAC-signed webhooks; image retention windows with review images.
• Saved workflows, sanctions-watchlist hot-reload, browser capture widget, public status page, OpenAPI spec.

v0.2.6–7

10 August 2026

Age estimation, review queue, document barcodes

• v0.2.6: /v1/age endpoint, AML monitoring, hosted verify links, review queue, console views, benchmarks page.
• v0.2.7: US/CA driver's-license verification — PDF417 barcode + AAMVA parsing.

v0.2.4–5

10 August 2026

Console and admin

• Customer and admin dashboards with an admin API.
• Google sign-in for the console (OAuth + PKCE), httpOnly sessions, API-key management.

v0.2.2–3

10 August 2026

Self-serve signup

• Signup module with real lead capture and enterprise contact; real-time signup notifications.

v0.2.0–1

9 August 2026

The platform release

• Merged the identity-platform track into main: engine facade with pluggable backends; mask/eye-state/age/emotion signals; injection signals v1; blink + randomized challenge liveness; continuous stream liveness for V-CIP; revocable biometric templates; Ed25519-signed results.
• Identity modules: MRZ parsing, Indian identity/contact validation, KYB, transaction monitoring, AML sanctions screening, device & IP analysis, workflow orchestrator.
• Production plumbing: Prometheus metrics, rate limiting, webhook retries, Redis shared state, Vault secrets, universal audit log, idempotency keys, prepaid credits with Dodo top-ups.

v0.1.0–2

12 July 2026

First deploy

• Face match + liveness API live at liveliness.neetix.in; keyless CI deploy; early route and container fixes.