Changelog
What we shipped recently.
Subscribe via RSSLaunch readiness pass: feature flags, admin alerts queue, status page
Shipped the admin alerts queue with severity and status filters, a feature-flag console, a public /status page, and a /changelog with RSS. HIBP leaked-password protection is now on by default for new sign-ups.
adminsecurityopsBlog with weekly AI-authored posts
Launched the Resources blog at /resources with pagination, format filters, and JSON-LD per post. A single male persona (Marcus Chen) now writes two posts every week — one affiliate-focused, one product-focused — generated via the Lovable AI Gateway and scheduled with pg_cron.
contentSecurity hardening: audit-log coverage, rate limits, RLS sweep
Audit log now records every workspace and project membership change with IP and user-agent. /api/public/v1/* endpoints are rate-limited per API key, and a database linter sweep tightened SECURITY DEFINER function exposure.
security