Changelog.

What's shipped.

Recent capabilities, most recent first. This list reflects shipped functionality; roadmap items are called out as such elsewhere on the site.

SIEM adapters & offline verifier

• SIEM adapters shipped: Splunk HEC, Microsoft Sentinel, and syslog (RFC 5424).
• Offline attestation verifier — tools/verify-attestation.js, zero dependencies, re-checks any decision without trusting us.

Identity & device posture

• SCIM provisioning via Jackson, with role-from-groups mapping and full audit of adds and removals.
• Device-posture export to Okta Device Trust, Microsoft Graph managed-device, and CSV.

Enforcement & policy core

• Deterministic pattern floor, just-in-time approval queue, and an append-only audit log.
• Signed policy distribution — Ed25519, roughly ten seconds to reach the fleet.