Changelog

Notable changes to the LocalMind platform.

2026-07-24 — Clean SaaS core

Multi-tenant projects with members, invitations, two-stage ownership transfer and a 30-day soft-delete grace period.
Permission-first RBAC on two axes — platform System roles and per-project roles — with a single audited platform:override.
Passwordless authentication — email codes, passkeys and Google / GitHub social sign-in — with optional TOTP two-factor and step-up elevation for sensitive actions.
Scoped API keys frozen to one project and a subset of its permissions.
Signed webhooks backed by a transactional outbox, with HMAC signatures, retries, dead-lettering and manual replay.
A product-neutral audit log across project and platform scopes.
A stable REST contract: { data, meta } envelope, errorCode-based errors, page/limit pagination and OpenAPI-generated types.

This release resets the platform to a domain-neutral core. Product features will attach under the reserved resources:* surface.

Notable changes to the LocalMind platform.

Multi-tenant projects with members, invitations, two-stage ownership transfer and a 30-day soft-delete grace period.
Permission-first RBAC on two axes — platform System roles and per-project roles — with a single audited platform:override.
Passwordless authentication — email codes, passkeys and Google / GitHub social sign-in — with optional TOTP two-factor and step-up elevation for sensitive actions.
Scoped API keys frozen to one project and a subset of its permissions.
Signed webhooks backed by a transactional outbox, with HMAC signatures, retries, dead-lettering and manual replay.
A product-neutral audit log across project and platform scopes.
A stable REST contract: { data, meta } envelope, errorCode-based errors, page/limit pagination and OpenAPI-generated types.

This release resets the platform to a domain-neutral core. Product features will attach under the reserved resources:* surface.