See the latest updates and improvements to ProcesOS
Current Version: v2.20.0
v2.20.0
Guided Setup, Incentives & Claims
Creating a workspace is now a linkable, resumable six-step flow. The XP economy moves into a cockpit Incentives area, and people can submit claims for verification across workspaces.
Added
Workspace creation runs as six linkable steps with its own routes, so a setup can be shared, left and resumed
Unfinished workspace setups are listed for 30 days with the step each stopped at, and can be picked up where they ended
Provisioning shows the phases it has completed and reports what the template actually created once it is done
Ecosystem roles are grouped by archetype during setup, and every template states how many documents it brings
Incentives is a cockpit area with five tabs — Rules, Achievements, Rewards, Impact and Skills
The rules tab makes the XP economy readable: what a bounty, a maturity level and a credential type are each worth
People can submit a confirmed claim to another workspace, carrying labels and types only
Workspace members with verification rights can decide a submitted claim, recorded as a separate result
Changed
Incentives moved out of the workspace settings and into the cockpit, next to the capability tree and the network graph
Skill statistics count people rather than progress records, so member totals, averages and top lists match the workspace roster
Averages are shown only where the group is large enough to support them, and always name the population they came from
Personal offerings can only be activated once their setup is validated, and are presented in three groups
Fixed
Every message catalogue that ships with a release is compiled into it, so newly added areas render their text on first load
A person working across several departments counts once towards a skill, with the level their combined experience earns
v2.19.1
Changelog Clarity
The release history now reads as release notes rather than as internal bug-tracker entries, with every date and technical detail left intact.
Changed
The fixed entries of releases v1.0.1 through v2.9.0 describe the behaviour that now holds, with their technical substance, magnitudes and publication dates unchanged
Three changelog entries with no observable effect on the product were removed
v2.19.0
Identity Assurance & Credential Verification
Identity assurance becomes its own axis I0-I4, credential claims can now be verified, and a failing index migration no longer blocks a deploy.
Added
Identity assurance ladder I0-I4 as its own axis, derived from append-only verification events so a revocation actually lowers it
Credential verification runs that record what was checked, and name the seven checks this instance cannot yet perform
A "what we did not check" block on verified credentials, so an absent check can never be mistaken for a passed one
The seven personal claim kinds now render as translated labels instead of raw slugs
Changed
Identity assurance is global to the person rather than workspace-scoped, so eligibility can be judged across workspaces
Migrations create indexes through a shared helper that matches on the key pattern and reports differing options instead of replacing them
Fixed
Schema migrations recognise an equivalent index that carries a different name, so an upgrade applies cleanly on instances whose collections were seeded by earlier tooling
v2.18.0
The FAIR Passport, and Capabilities That Know Who They Need
A complete FAIR Passport pipeline — four pillars, examiners, appeals, issuance — and capability nodes that can finally name the people, skills and occupations they require.
Added
FAIR Passport pipeline: four pillars, rubric as configuration, three scoring runs with the median per pillar, and run provenance
Examiner path: allocation with a conflict-of-interest block, counter-signing that holds up issuance, appeals with a named decision-maker and a deadline, and the FFDE role that edits evidence but never scores
Passport issuance with two-year validity, an expiry sweep and a public register; eligibility gate on TRL and four validated process views
Workspace Compass — questions, ranked results with their reasons, and a join request
Skill-tree builder with draft trees, node rewards, reward types and achievements
Workforce roles on a capability definition, mapped to ESCO occupations, with per-target overrides
Skill requirements suggested from a node's occupations — provenance-tagged, curator-decided, never applied automatically
Node card sections "Skills and credentials" and "Roles and authority", with skill names instead of identifiers in en/de/es
Person ↔ capability matcher with six named evidence states and no score
Workforce-transition map per capability, attachable as evidence for its workforce assessment
Capability-derived learning pathway: course draft, Setup and Run participation as components, Open Badges 3.0 export with ESCO alignment
ESCO occupation registry (~3 000 occupations with ISCO-08 groups and their essential and optional skills) and a runtime load path for the ESCO dataset
Assurance ladder A0–A4 on claims and evidence generally; ISIC / COFOG / SDG crosswalks on the sector taxonomy; distributional social-outcome fields on human-outcome statements
Changed
No composite score is shown without its breakdown — the FAIR transparency rule, applied to readiness as well
Readiness is a statement of named met / unmet / cannot-be-evaluated lists with blocking flags; the percentage is removed
Workspace skill checks honour each person's release level for their performance data; withheld data is reported as a count, never as a zero
Human capability requirements can name the skills they ask for, and every skill row on a capability records where it came from
The typed edge vocabulary between capabilities now matches the eleven Geneva relation types
The discussion list reads as a table, and a thread's pipeline moved into a header band
The workspace overview is three columns, with maturity shown next to the lever that moves it
Fixed
Skill requirements on a capability were permanently unsatisfiable — the check read fields nothing ever wrote and reported the result as "not earned yet"
Credential requirements on a capability never matched, because the check looked for the slug in a place credentials do not carry it
A capability that could not be evaluated no longer counts as one that failed
Achievements are granted again — the evaluator, the id space and a missing branch
Removed
The numeric readiness score and its breakdown
v2.17.0
Finding and Joining a Workspace
Workspaces can now be discovered, asked to join, and approved from the members list — and a new personal onboarding screen shows a first-time visitor where to start.
Added
Workspaces can appear in a public `/explore` directory and accept join requests, both opt-in per workspace
Join requests notify the people who can decide, and can be approved from the bell or from an approval queue in the members list
A personal onboarding screen for people who have just signed up
The capability detail panel shows required, optional, alternative and supporting dependencies, with blocking kinds kept apart from the rest
"Where do you want to go?" — pick a capability and see the missing prerequisites as an ordered route
A forum thread row shows whether the discussion was analysed, drafted or proposed, and marks the ones that have stalled
Setup, Run, Change and Retire processes are part of a capability's data model
The FAIR passport rubric is configuration rather than code
Changed
ProcesOS is now proprietary software; tech reform GmbH holds all rights
The network map follows the active theme and explains its pins, with the location form beside the map instead of below it
A manual FAIR score override can be removed, and the computed score stays visible underneath it
Both forum filter rows name the axis they filter, and every label goes through translation
Fixed
The thread analysis renders emphasis instead of printing the asterisks around it
`--bg-active` and its foreground are declared in every theme — the "you are here" background rendered nothing at all
Settings navigation groups are announced with the entries they head, and the current entry is marked as current
Five status colours that failed contrast on the light theme now use tones that hold on every theme
An industry no longer matches a sector because its name contains the word
v2.16.0
Capability Authoring & Access Control
Capabilities can now be created and adapted from the catalogue itself, and three surfaces that answered to a login alone now ask who is actually allowed.
Added
Create and adapt capability definitions directly from the catalogue and from any capability page, with category as a required choice
Filter the capability catalogue by category, and see it on each card
Curating the role-profile catalogue is now a separate, delegable permission rather than part of instance administration
A lane map beside the capability force graph, with the selection surviving the switch between the two
Workspace settings are grouped into five sections instead of one long list
Changed
Adapting a capability now links the processes that already referenced it, instead of waiting for each diagram's next save
Moving a diagram to another workspace takes its process-role links along, rather than leaving them behind in the old one
Saving in workspace settings names the section that was written, so two saves are no longer indistinguishable
Fixed
Certification submissions, estimates and partner requests could be read or raised for diagrams outside the caller's workspaces
Anyone signed in could add an entry to the global role-profile catalogue and publish it
The capability picker when publishing a marketplace listing was always empty
A capability could be created with an address that nothing could open afterwards
Listings could be published at a negative price
v2.15.0
Capabilities Meet Their Processes
A capability node now points at the diagrams that build and run it, validating one activates it, and the cost it carries is finally on screen instead of behind an endpoint nobody called.
Added
A capability's `uses` relation binds to the processes that build and run it, with the bound diagram openable from the properties panel and unbacked claims flagged during validation
Validating a capability's setup diagram activates the capability — a direct link no longer needs a blueprint
The capability cost basis is visible on the node, in its detail view and in the workspace cockpit, with an explicit recompute
Saving a diagram records which capabilities it touches, so the link between a process and a capability no longer has to be declared by hand
Walkthrough steps for capability nodes carry description, status and the systems behind them
A collapsed subprocess or call activity can reference another workspace diagram and open it
Confirming a claim now writes the assertion it derives
Changed
Writing to the global capability catalogue now requires the `gttTemplates:manage` permission
The five capability element colours come from one table, with a separate fill tone for surfaces carrying white text — measured against every theme surface rather than chosen by eye
The home page hero image loads eagerly; it is the element the page is judged on
Fixed
The readiness list names which dependency is missing instead of repeating "Missing dependency"
Capability nodes no longer sever the sequence graph in the walkthrough
Numeric entities written by the XML serializer are decoded in business-metric attributes, so a value round-trips as itself
v2.14.0
Personal Import & Cost Transparency
Bring a CV or Europass file into your own workspace on the free tier, trace what a process costs task by task, and reach every cockpit tab before a single process is validated.
Added
Personal Import page for Europass XML/JSON, LinkedIn CSV exports and plain-text CVs, with per-claim confirm, correct or discard
Internal datarooms on the free tier with a 500 MB quota, and pasted text stored as Markdown
Cost Breakdown tab in the analytics dialog showing the calculation task by task, with branch and execution weight
Editor command that opens the analytics dialog directly on the cost breakdown, reachable from the command palette
Workspace quest rows now show deadline, evidence type, scope and XP instead of only a slug and a price
Changed
All cost figures come from a single engine; the parallel implementation that never reached the editor's data model is gone
The cost view names its own blind spots — unresolved lane rates and truncated rework loops are stated rather than costed as zero
Fixed
A logged-in user with no membership could name another workspace and have its stored AI credentials used on their behalf
The cockpit no longer hides its tab bar and all ten tabs when a workspace has no validated process
Removing a treasury address is no longer blocked by unpaid internal work orders, which pledge nothing and never close
The ecosystem map is reachable again, and its anchor links work
Import and review routes refuse API-key authentication, which cannot be scoped to a single workspace there
Diagram SVG and PNG export now renders in the browser and reports a failure instead of quietly producing nothing
Long AI assistant conversations scroll inside their panel rather than pushing the editor out of shape
v2.13.0
Federated Events & Change Execution
Instances now exchange signed, ordered events. Changes can be forked, approved and promoted over HTTP. And the landing page finally shows the product.
Added
Federation exchanges signed events between instances: an append-only store with idempotency and ordering, an authenticated inbound route, and an outbound queue with its drainer
Revocation propagates across federated instances — by construction it can withdraw a grant but never issue one
The federation event queue is readable by an operator, so a stuck exchange can be diagnosed instead of guessed at
UCX Change Execution over HTTP: fork a process, approve it, promote it
Personal and household workspaces carry their own capability graphs
⌘K opens a command palette in the editor, filled with the editor's own verbs
Capability nodes participate in sequence flows, and the AI wizard can create and read them
Workspaces see their own quest drafts in the management tab
An admin panel names the registry entry the landing page exhibits — previously only reachable by editing the database
The landing page shows real product screenshots in all five frames: editor with the assistant, cost and path analysis, the exchange, and the workspace cockpit
Changed
Each quest row shows one readable status, derived from what the quest actually declares
Quest generation is locked across replicas, and generated rows say so
Fixed
The marketplace refuses self-offers on quests on the server, not only in the interface
A household with no members is reported as a defect instead of rendering as an empty one
An absent capability list is no longer read as an empty list
v2.12.0
Workspace Cockpit & Capability Flows
The workspace cockpit gains sovereignty and FAIR views, capability nodes join sequence flows in the editor, and the Academy opens its learner and author views.
Added
Workspace cockpit: sovereignty view across four jurisdictions, a FAIR matrix per system, and FAIR scale / jurisdiction buckets as token-bound bands
Capability nodes participate in sequence flows — splice them into a flow or append them from any task, event or gateway
Editor navigation in three levels (mode · view · action) with a process state strip in the toolbar
Academy: personal "for you" view with level gain and learning progress, plus an author view exposing the publish checklist
Jurisdiction stamps record where a process is compliant as-is, backed by a declarative compliance rulebook format
UCX lifecycle: handover packages, reopen triggers, and capability evidence rolled up from diagrams
Federation administration is separately delegable via new federation permissions
Wizzy, the assistant, has a real drawn figure
Changed
The theme picker offers the two maintained themes, and the theme cookie is validated instead of trusted
All themes gained the semantic tokens components were faking; marketplace surfaces no longer assume a dark theme
Every number on the marketplace states what it counts, using one shared label module
Stranded course enrollments are marked instead of deleted
Fixed
The employer's view of a member's level is workspace-isolated again
Ecosystem map edges meet the 3:1 contrast requirement where they are drawn
Admins can set which registry entry the landing page exhibits — the setting existed but had no UI
v2.11.0
Federation & a Rebuilt Front Door
Instances can now agree to work together under signed, scoped terms. And the public site was rebuilt from the ground up — nine chapters, two new explainer pages, one honest companion.
Added
Federation agreements between instances: mutual terms, key challenge, signed handshake, and an admin panel over the whole state
Inbound and outbound federated calls are gated on an active agreement, persisted and audited
`/capabilities` — a public explainer for the Universal Capability Exchange, with a shared status vocabulary bound to the product's own node states
`/ecosystem` — eleven actors on a map with their connections and a second view of who is accountable to whom
The registry chapter reads a real published solution: setup and run as a pair, six SC4 dimensions, verification level, and where each figure comes from
Orbit replaces the landing chat — read-only enforced server-side, with a ring that reports the knowledge actually used
Capability versioning: fork, approve and promote without destroying the previous state
Workspace sector curation, an incoming-steward worklist, and per-instance stewardship
A first-class workspace type axis, indexed, driving trial gates and licence lists
Academy articles carry translated prose through a locale sidecar
Changed
The landing page is driven by one ordered chapter array — adding a chapter is a single line, and numbering follows automatically
Typography, spacing, radii and motion are theme tokens; fonts are self-hosted with no third-party CDN request
The workspace overview was rebuilt as headline, metric strip and open points
The process map is now the default view of the diagram listing
Notification bodies render from typed payloads in the reader's own language
Wizzy's readiness check names consequences instead of deficiencies and no longer blocks the start
Wizzy's confirmation dialog shows a diff — target, before, after and consequence — and offers a per-turn undo
The wand signals a real mutation only; reads, searches and simulations never trigger it
Paraglide compiles per locale and the build is gated on a memory budget
Fixed
A logged-in user could read and write another workspace's resource library through a caller-supplied workspace id
SC4 environmental sustainability could never reach 5.0 and scalability silently saturated — every dimension now sums to the full scale, and scores from different weightings are never subtracted from one another
Unpublished academy articles were reachable, and workspace handbooks could enter the global knowledge index
Level rewards were counted across workspaces instead of the caller's own
Course completion XP was credited outside the real ledger
URL-localized routes were linked without their locale prefix, sending German visitors to the English page
Light theme muted text was green-tinted and below the WCAG AA threshold
Several cockpit counters were structurally wrong, and failing card queries took the whole page with them
A forked capability template did not resolve on the read path
The shipped env bundle was not covered by the ignore rules
v2.10.0
The Capability Catalogue
The Universal Capability Exchange arrives: a forkable catalogue of capability definitions, assessments across thirteen dimensions that never collapse into one score, and licence-wide module control.
Added
Universal Capability Exchange: a reference catalogue of capability definitions that nations, sectors and institutions can fork across five adaptation layers without mutating the common node
Capability type vocabulary — a stable classification of what a capability is, held separate from the node that defines it, so a national fork never breaks the shared vocabulary
Six mandatory human fields on every capability definition, including the judgement that must remain human and the outcomes that are never acceptable, carried as data in any language
Capability assessments across thirteen separate dimensions with supporting evidence, and eight red flags that route a capability to review or refusal regardless of how strong the rest of the picture looks
Fork write path: create a fork at a lower adaptation layer and override local metadata, with lineage fields refused rather than silently ignored
Module switches under an enterprise licence: disable a licensed module instance-wide or for a single workspace, without touching what was bought through Stripe
Changed
Marketplace acceptance now enforces credential and skill requirements instead of merely recording them
The Cardano escrow validator ships compiled with a script-hash drift tripwire, and mainnet operation is refused without an explicitly pinned escrow address
Testnet and mainnet signing keys are separated structurally, so a misconfiguration cannot quietly reach the wrong network
Fixed
Reference catalogue entries no longer count towards a workspace's capability maturity, dashboards or unlock cascades — publishing a catalogue no longer lowers everyone's score
Creating a template through the raw write path can no longer bypass the fork rules
The forum now keeps the active workspace in step with the thread being viewed
Under an enterprise licence the admin table showed workspaces as having no modules when they in fact had all of them; it now reports the effective set and where it comes from
v2.9.0
Shell, People and a Guided Start
A global bar above every view with notifications grouped by urgency, the Departments tab becomes a real People directory, and new workspaces get a guided setup instead of a modal.
Added
A global bar above every app view: my area, workspaces, marketplace, academy and forum, plus a workspace switcher, ⌘K command palette, level and notification bell
Notifications grouped by urgency with counted filters, each line naming the workspace it came from
People directory in the workspace cockpit: lanes resolved to people, contacts, process involvement and key-person risk
Three-step release levels for performance data — private, workspace or network — controlled by each person for themselves
Guided workspace setup: a resumable flow with credentials, invitations, process-map stubs and data-object capture
Instance-wide artifact registry with cost attribution per cost object and per licence line
Bulk invite and update of members from a spreadsheet
Marketplace browse-and-inspect layout with facet counts and a way out of an empty result
Changed
The personal dashboard is one screen without tabs; what waits for you is sorted by deadline across types, and workspaces are ordered by open items rather than alphabetically
A person's level is a number. Tier names no longer appear next to it, though the tier colour stays
Course XP is derived from the incentive table instead of being entered freely
Skill cards became rows, and the two values nobody could interpret are gone
Fixed
Draft courses are readable by slug, enrollable and publishable only once they carry at least one lesson
Custom credential gates can be satisfied — the credential slug is persisted with the gate
The Spanish translation gap is closed, with a guard against it reopening
Trial expiry is written compare-and-swap, so concurrent requests cannot clobber it
The vote board renders proposals that carry an ROI date
One live edge per workspace pair in the workspace graph, instead of one per workspace
Dataroom feature gates resolve through the licensed subscription
A failing migration is isolated so the rest still apply, and a duplicate migration id is refused rather than silently skipping one
Every sample workspace exports, and template references resolve
v2.8.0
A Seeded Ecosystem & Cross-Workspace Seals
Eight sample workspaces to adopt as templates, processes that carry a seal across workspace borders, and capabilities that now activate on Setup — where they are actually created.
Added
Eight connected sample workspaces seed as a working ecosystem — bakery, mobility association, self-sustaining village, stewarded ecosystem, solution provider, transformation consultancy, municipality and issuing authority — with cross-workspace adoption, a quest and a collaboration link between them
Four of the samples are adoptable workspace templates, so a new workspace can start from a solution provider or a municipality instead of an empty page
Cross-workspace process certification: request a seal from an issuing authority, which reviews the diagram in a shared collaboration space and certifies it against a named standard
Lane-staffing requests — a lane with a credential requirement must be staffed before a process can be certified, and an open request blocks the seal
Certification is a portable credential that travels with the process when its template is adopted
Lane roles carry their required credentials into exported templates, so an adopted process keeps its qualification bar
Administrators can seed the sample workspaces from the admin panel, including a reset that refreshes a demo instance
Soziale Fahrten licences can be bought through ProcesOS
Changed
Capabilities now activate when the Setup process is validated, not the Run process — a Run process cannot be validated for a capability that does not exist yet. Existing blueprints are migrated automatically, and anything ambiguous is left untouched and logged rather than guessed
Governance leads are seated in the shared collaboration workspace, so a head of compliance can actually review what their workspace was invited to
Exported templates keep the own pool and the partner pool distinguishable, so a two-party process survives adoption as a two-party process
Four eyes are enforced across workspace boundaries: whoever requests a certification cannot grant it
Fixed
Workspaces whose diagrams reference CMDB artifacts can be published as templates — the embedded database ids are rewritten into placeholders that resolve inside the manifest
A reference pointing at a record that was never exported is refused at publish time instead of shipping as a link to nothing
Every sample workspace exports cleanly through the anonymizer; random identifiers that leaked into exports were replaced with stable ones
VAT is requested during workspace checkout
The setup check degrades gracefully when the database is unreachable, instead of turning every route into a server error
v2.7.0
Languages Per Deployment & Voice Transparency
A deployment can now ship its own languages via LOCALES — declare generously, translate over time. And Wizzy shows which voice provider handles your audio before you opt in.
Added
Languages are configurable per deployment through a LOCALES environment variable — locales.config.mjs is the single source of truth and drives localized routes, the inlang project, and every locale list in the app
LOCALES travels the build path (GitHub Actions to Docker build argument), so an image carries the languages it was built for instead of falling back to the default set
Declared versus translated locales: a declared language reserves compiled capacity and gets AI narration and interview questions immediately, while the interface offers it only once its translations exist
Voice provider details before consent — provider name, who operates it, and how audio and text flow (speech-to-text discards audio, text-to-speech caches for 30 days), shown in the voice-interview consent dialog and behind an info trigger next to the voice controls
Voice configuration reports its scope, so you can see whether voice runs on your workspace's own provider or the instance-wide configuration
Changed
Accept-Language is parsed properly with quality values instead of matched against a whitelist
Language names appear as endonyms via the platform's display names (Kiswahili, Gikuyu, Dholuo); flags are reserved for the shipped languages, since a language is not a country
The language switcher, locale negotiation and the sitemap derive from the translated locale set; the AI narration and elicitation endpoints deliberately use the declared set
Fixed
Email templates fall back to the base locale for a language without its own templates, instead of failing outright
The sitemap emits URLs and hreflang alternates only for translated languages, so search engines are never pointed at English content under a foreign language code
v2.6.0
Whitelabel, Demo Mode & Verified Mandates
Instances can carry their own branding, open a public demo, and issue term-bounded committee mandates whose on-chain proof is actually verified — plus a broad security pass.
Added
Instance whitelabeling: name, logos, CI colors and a slim branded landing page, gated on the instance license
Governance-role credentials for committee mandates (chair, vice-chair, delegate, member, observer) with terms, appointing body and declared interests
Data-driven workspace structure for governance bodies, including sub-committees, cross-cutting bodies, an organisation workspace and one workspace per summit
On-chain verification of minted credentials against the chain, with the network always labelled and an outage never devaluing a genuine proof
Versioned sector taxonomy with crosswalks, and sector tagging for diagrams, blueprints, artifacts and capability nodes
API keys can be issued with a read-only scope for partner integrations
Datarooms can be gated on committee membership, role and appointing body
Changed
API keys are now strictly limited to the workspace they were issued for; key authentication is refused on admin and key-management endpoints
Credentials whose validity or mandate term has passed are now reliably treated as expired
Pricing pages show curated, localized plan features again instead of raw internal feature names
The release banner no longer mixes languages, and the mobile navigation header is decluttered
Fixed
AI-generated report HTML is sanitized before it is rendered, printed or copied
The session cookie keeps its httpOnly protection — the session object is no longer serialized into the page payload
Workspace member and dataroom routes reject non-string filter input (query injection)
Credential issuing via the Andamio import requires a write permission, and the mint endpoint enforces membership
Module gates added to compliance, CMDB and marketplace mutations that were only gated in the client
Rate limit and token bound on the AI completion endpoint, hard timeout on the thumbnail worker, URL validation for avatars and the Odoo endpoint
A repair migration normalizes invalid capitalized element names in stored diagram XML, restoring BPMN 2.0 schema validity for exports
v2.5.0
Own Voice, Own Storage
Wizzy's voice can run fully self-hosted or on your workspace's own provider, datarooms gain decentralized Storj storage with uploads, and the workspace handbook reads your Odoo knowledge base.
Added
Self-hosted voice provider (Speaches) with locale-dependent TTS voices — German, English and Spanish each speak with a fitting voice, fully on-instance
Workspaces can bring their own voice provider (AI Studio module): keys encrypted in the workspace vault, per-workspace audio caches
Admin voice settings list available models and voices live from the configured provider
Storj as decentralized dataroom storage: credential-gated listing, shared-link downloads, and direct uploads from ProcesOS into the bound folder
Workspace handbook: reading surface and dashboard widget combining workspace articles with a bound Odoo knowledge subtree (read-only proxy)
Changed
Wizzy's spoken output follows the app language — each locale gets its own cached audio
Dataroom error handling distinguishes 'no access' (request access) from 'workspace connection broken' (admin issue) consistently across providers
v2.4.0
Sovereign Licensing & Voice Interviews
Dedicated instances can run on a signed offline license instead of per-workspace billing, and Wizzy now conducts the process interview by voice — with consented transcripts to the forum.
Added
Instance license mode: signed offline license key replaces Stripe entitlements instance-wide, with an enterprise-mode switch and admin license panel
Voice interview: Wizzy speaks elicitation questions, accepts push-to-talk answers and spoken confirmations, and posts a consented Q&A transcript to the linked forum thread
Capability-node listings bundle their Setup+Run processes; CMDB artifact listings carry an ISMS evaluation profile and link to the capability nodes they enable
Capability nodes list the marketplace solutions that satisfy them, and adopted solutions arrive in your CMDB with their published ratings
Acquisition cost basis for capability nodes derived from Setup/Run processes, with normalized currency and rate units
Tasks can reference existing runbooks and automations directly from the BPMN properties panel
Changed
Marketplace categories renamed to the operating-layer vocabulary: Capability Node, CMDB Artifact, Workspace Blueprint; standalone process blueprints are retired from browsing
Blueprints gained a full lifecycle: workspace scoping, draft state, archiving — nothing is published forever by accident anymore
Business-metric fields are normalized and validated on diagram save (currencies, duration units, structured JSON fields)
Fixed
Workspace identity creation works on a fresh deployment — the signing library's ESM build is restored at install time
The AI diagram assistant reports what went wrong on large batch builds: invalid element types are rejected with clear feedback, broken connections abort early, and the model is told the reason
Adopting a capability creates its dependent nodes
A diagram cloned from an adapted capability carries its content
The changelog shows the running app version, and the voice settings panel opens in the admin dashboard
Wizzy gets a voice — provider-agnostic speech in the editor and dashboard. Google Drive datarooms are now free for every workspace, plus a licence-compliance pass.
Added
Wizzy voice layer — have answers read aloud and speak instead of typing, in both the editor assistant and the dashboard guide
Provider-agnostic voice configuration decoupled from the chat provider — Mistral (Voxtral) and any OpenAI-compatible endpoint, including self-hosted inference servers; configured under AI Settings and applied without a restart
Push-to-talk with hold-to-talk or click-to-toggle, capped at 90 seconds; the transcript lands editable in the composer and is never sent automatically
Voice usage metering per user and per workspace (characters spoken, seconds transcribed), with cached playback excluded from billing
OSS licence inventory plus a generator, so the dependency licence position can be audited rather than assumed
Changed
Google Drive datarooms are no longer a paid module — free tier at zero cost, toggleable per workspace by an admin
AGPL-licensed dependencies replaced, the bpmn.io watermark restored as the bpmn-js licence requires, and a NOTICE file now ships with the application
Spoken audio is never stored — only the resulting transcript is; synthesised speech is cached so repeat playback costs nothing
Fixed
Walkthrough interviews: answers write through, a declined or negative answer is remembered instead of being asked again, and questions respect the semantics of the task they belong to
Drive datarooms: folders are reachable, credential pickers show the workspace's real credentials, and forum links are scoped to the folder
The walkthrough's Back button is enabled whenever there is a step to return to
v2.2.0
Guided Walkthrough Mode, Google Drive Datarooms & Sovereign Hosting
Turn any diagram into a narrated walkthrough that also captures stakeholder data, back credential-gated datarooms with Google Drive, plus a landing overhaul and the move to sovereign self-hosting.
Added
Guided Walkthrough — Presentation mode: a read-only token stepper that walks a diagram element by element with one-sentence Wizzy narration (generated once per version, cached) and a plain-language data panel; you advance with Next and choose branches at gateways
Guided Walkthrough — Elicitation mode: the stepper becomes an interview with a deterministic gap engine and Wizzy Q&A; answers are captured as provenance-tagged, staged claims, never written silently
Guided Walkthrough — CMDB auto-capture: systems named in passing are fuzzy-matched against existing artifacts (match offers a binding, miss offers a draft); drafts are excluded from compliance/scope analysis until a steward confirms, merges, or deletes them
Google Drive as an external dataroom storage provider — connect a workspace Google account, back a credential-gated dataroom with a Drive folder, list and preview files under the same access policy (including lane-based gating)
Forum threads can link datarooms, carrying a credential-gated document space alongside the discussion
Featured login providers with a "more options" dropdown on the sign-in screen
URL-localized marketing routes (/de, /es) with hreflang
Changed
Landing page restructured around the Process-OS narrative with one canonical value proposition across en/de/es, plus brand-story videos on the business and government pages
ProcesOS now runs on sovereign, self-hosted EU infrastructure (website, application, and the Veridian/KERI identity agent) instead of a managed hosting provider
Fixed
Andamio integration validated and hardened
Comment requests raised from an element click carry the workspace id, so they resolve in the right workspace
An unverified email address is redirected to verification
v2.1.0
Wizzy on the Dashboard, hiop.io DataOps & a Dockable Assistant
Wizzy comes to the dashboard, a new hiop.io DataOps module ingests real process metrics, self-hosted OpenAI-compatible AI endpoints are supported, plus a dockable assistant and a security pass.
Added
Wizzy on the personal dashboard — a user-centric AI guide that reads your workspace context, role, open tasks, maturity standing and recommended next capabilities, with read-only tools scoped to your workspaces and quick-actions (What's on my plate / What to map next / How are my workspaces doing)
hiop.io DataOps workspace module (ingest MVP) — push real cost / duration / frequency / volume metrics to a workspace-scoped, API-key-authenticated ingest endpoint; measured values surface next to modeled estimates in process cost analysis
Mandatory DataObject classification on every hiop ingest binding — each transfer is GDPR-classified via the existing DataObject library; special-category bindings blocked, personal-data bindings flagged
Idempotent metric delivery (by delivery ID) plus an integration panel that generates a copy-paste hiop.io pipeline snippet
Resizable and dockable Wizzy chat panel in the editor
Support for self-hosted, OpenAI-compatible AI endpoints via a new AI_BASE_URL setting — run against your own model server instead of a hosted provider
Changed
The editor's Wizzy chat now bounds its height so long conversations scroll inside the panel instead of expanding the layout
Fixed
AI-generated pools and lanes are created through supported bpmn-js geometry, so participants and lanes render as expected
The admin user list reports each user's actual last login
The HIGH-severity findings of the July 2026 security audit are closed, including hardened Stripe webhook handling and tighter cross-tenant checks on federation collaboration endpoints
v2.0.2
Tidy-Up Layout, Save History & Workspace Invites
A gentle "Tidy up" layout mode with single-step undo, undo/redo buttons and a rolling save history in the editor, plus invites for not-yet-registered users and client-side diagram export.
Added
"Tidy up" layout mode in the editor — gentle align / grid-snap / edge-straighten that preserves your arrangement and reverts with a single undo
Undo / redo buttons in the editor toolbar
Rolling save history — up to 5 automatic snapshots per diagram (throttled ~1 per 5 min of editing, plus one before each auto-layout and AI change) with a preview-and-restore menu; restores are reversible
Full re-layout now offers a one-click Undo toast
Invite not-yet-registered users to a workspace by email — the invitation is applied when they sign up
Changed
The AI wizard's layout step now uses the gentle tidy-up instead of a full re-layout, keeping Wizzy's changes undoable
Fixed
Diagram SVG and PNG export renders in the browser and reports a failure instead of producing nothing
v2.0.1
Editor & Diagram-Listing Fixes
BPMN element coloring and single-lane naming restored, user-task forms save correctly, and the diagrams listing gains group-by, process metrics, and per-card forum links.
Added
Context-pad color picker for BPMN elements — recolor tasks, events, lanes and pools; colors persist through save/reload and XML export
Group-by toggle on the diagrams listing — folder, status, or folder-then-status with per-section counts and preserved sort order
Process-metrics card view on the diagrams listing — Lanes / Tasks / Paths / Systems / Maturity from the analytics snapshot, with a not-yet-analyzed state
Per-card forum link on the diagrams listing — open an existing linked thread or create-and-link a new discussion (workspace spaces only)
Lane Name field in the properties panel for single-lane pools
Fixed
BPMN element colouring runs through the bpmn-js renderer configuration, so themed defaults and custom colours both render
Form definitions built in the user-task dialog are persisted
A single-lane pool can be named from its properties panel, where the participant and lane label bands overlap on canvas
SVG and PNG export works for diagrams with no stored thumbnail
The landing page assistant answers from a maintained feature map rather than from the model's own assumptions
v2.0.0
The New Workspace Shell
A rebuilt workspace-centric UI with shell and switcher, Wizzy as public landing consultant with lead capture, a sharper six-pillar landing page, and Tresor as a new AI provider.
Added
Wizzy landing chatbot: a public, abuse-hardened AI consultant grounded in landing data, configurable from the admin panel
Lead capture with explicit consent — chat leads flow directly into the CRM
Tresor as a stateless OpenAI-compatible AI provider
Changed
Navigation rebuilt workspace-centric: manage view as home base, persistent workspace shell, fast workspace switcher, and a personal shell
Landing page consolidated around the six CPG pillars with a unified section design and localized badges
Fixed
Protected pages render directly on a cold load — the auth guard runs server-side
v1.9.0
Stewarded Ecosystems
Workspaces for natural entities with legal personhood: ecosystem health index, care quests with human attestation, plus ISO/IEC 42001 compliance and server-side module enforcement.
Added
Stewarded Ecosystem workspace template: guardian/ranger/ecologist/volunteer roles, natural-asset registry, stewardship capability branch, and a ready-to-publish cleanup quest
Ecosystem Health Index with cockpit tab: score gauge, component breakdown, pain points, and a one-click create-quest path
Human-attested quests: volunteers accept and submit evidence, guardians approve or reject under a four-eyes rule, rewards issue automatically
Ecosystem-stewardship branch in the Global Technology Tree (charter, inventories, monitoring, cleanup, assessment, restoration)
ISO/IEC 42001 control library with Statement-of-Applicability management in settings, cockpit, and ISMS reviews
New landing page for stewarded ecosystems at /for-ecosystems, wired into the audience hub and signup attribution
CPG-cycle brand video featured in the landing hero
Changed
Logging in now lands in the workspace overview with your main workspace preselected
Paid add-on modules (CMDB, GTT, ESG, Academy Publisher) are now enforced server-side on every mutating API route
Quest publishing supports bounty-free internal workspace tasks with human attestation
Fixed
The onboarding tour keeps its place when you navigate back from the level page
Governance lane assignment offers an "(any)" placeholder for lanes without a specific person
v1.8.0
The Process Maturity Ladder
Processes now climb a unified L1–L7 maturity ladder — computed from workspace state and surfaced from the editor's readiness checks all the way to the workspace cockpit.
Added
Unified L1–L7 process maturity ladder, computed from workspace state and persisted per process (recomputed on freeze)
Pre-validation checks in the editor are grouped by maturity level, showing current standing and what unlocks the next rung
Maturity level surfaced across the workspace cockpit — governance overview and process rankings now span all seven rungs
New ProcesOS cycle glyph and animated loader; the CPG governance loop and L4–L7 rungs share one lifecycle visual
New gated Process Lifecycle knowledge-base article in the Academy
Landing pages: per-audience social-preview images, a default showcase image, and an audience navigation dropdown
Changed
Process level widened from 1–3 to the full L1–L7 maturity scale (backwards compatible — levels 1–3 keep their meaning)
The ProcesOS logo now links back to the homepage
Fixed
Login hero logo and headings are legible on the always-dark map background
Audience landing pages show their own per-audience image
v1.7.0
ERP Sync & Process Intelligence
ProcesOS now syncs live ERP data into process cost analytics, consolidates duplicate process roles, and reveals each process's most valuable and greenest path — under a refreshed brand identity.
Added
Odoo ERP integration: connect a workspace, map products to resource categories, and sync them with real costs into process analytics — plus inventory levels, KPIs, and a dry-run preview
Process-role consolidation: merge duplicate roles across diagrams using name, shared-responsibility, and member-name suggestions, with diagram sync-back and credential retitling
Events now carry directed value and resource flows, revealing each process's golden path (highest business value) and green path (lowest footprint)
CMDB sovereignty scan: a scan button auto-fills hosting, technology, and FAIR maturity details for IT-system artifacts
Refreshed ProcesOS brand identity — logo, favicon, brand color, and per-audience social-preview images, plus a new For Academia landing page
After login you now land in your main workspace cockpit instead of a blank editor
Per-audience conversion funnel for the landing pages
Changed
Paid add-on routes (Odoo, CMDB scan) are now enforced on the server, not just hidden in the UI
Fixed
Theme switching completes without a server error
The stakeholder validation dialog scrolls on small screens
The Academy back button returns you where you came from
XOR gateway branch probabilities are validated to sum to 100%
Unexpected server errors are caught and logged with a reference id you can quote in a bug report
Signup notifications describe the current activation flow
The user-task form editor renders correctly
v1.6.0
Governance Lifecycle & CMDB-Driven Process Analytics
Validation now gates AS-IS freeze behind an ISMS review + promote vote. Process Analytics' Systems tab realigned onto the real CMDB with FAIR/ISMS ratings.
Added
ISMS Compliance Review stage — when all lane-responsibles validate, the workspace's Head of Compliance gets an attestation task listing CMDB Systems + Data Objects used in the process, with FAIR / contract / GDPR gap indicators
Promote-to-AS-IS Vote stage — after ISMS attestation, a governance vote opens to lane responsibles + Head of Processes + Head of Compliance with configurable quorum and 7-day expiry
Governance dashboard surfacing — ISMS reviews and promote-vote tasks appear on the user dashboard, in the notification bell, and inline in the validation wizard
CMDB IT-System view in Process Analytics — Systems tab, Overview chart, Monthly cost table, and per-lane/per-path tags all driven by the real CMDB inventory with FAIR scores
Per-system Data Object detail — each CMDB system shows the Data Objects attached to its tasks with classification, personal-data flag, special categories, and legal basis
Shared freezeProcessAsIs() helper — atomic CAS-freeze + AS-IS version insert with rollback on failure
Changed
Stakeholder validation no longer auto-freezes the process — completion now opens the ISMS review stage instead. The validation-complete toast was repurposed to "Validation complete — ISMS compliance review opened"
Tailwind dark variant is now bound to the app's CSS-variable theme (light / dark / midnight / amethyst), not the OS prefers-color-scheme setting
Process Analytics snapshot stores real CMDB system names (instead of BPMN task-type pseudo-names) — improves AS-IS / TO-BE delta accuracy and SC4 setup-cost matching going forward
package.json now carries an explicit license field; README has a license section pointing at the LICENSE file
Fixed
Path analysis follows sequence flows only, so KPIs and path costs reflect the real process — data associations and message flows previously turned a two-branch diagram into 72 paths
The forum's process context resolves the CMDB systems and data objects a diagram actually references
Cockpit overview cards are legible on the light theme
Forum credential, tag and status badges hold their contrast on every theme
v1.5.4
Parallel Gateway KPI Correctness
Process-level KPIs no longer overcount shared tasks across paths produced by parallel gateways. Critical-path analysis replaces sum-of-durations for parallel branches.
Changed
Process-level KPIs (`totalCostPerRun`, `monthlyCost`, `totalEffortHours`) now use task-based aggregation with effective execution probability instead of summing over paths — eliminates the parallel-gateway overcount
Total process duration uses critical-path analysis (max across parallel branches) instead of summing across all paths
Scoped KPIs in `scope-analysis.ts` follow the same task-based pattern
Fixed
Process cost KPIs count each task once however many parallel paths contain it — an 11-task diagram with a single parallel fork previously reported roughly five times its cost per run
Process duration through a parallel fork uses concurrent-execution semantics, taking the longest branch instead of the sum of all branches
CMDB sovereignty scanner (SSRF-hardened), US CLOUD Act exposure in FAIR scoring, IRB FAIR matrix estimator, BYOK setup wizard, and BPMN tools on Anthropic managed agents.
Added
CMDB Sovereignty Scanner — server-side scan of DNS / HTTP security headers / SSL-TLS / WHOIS-ASN / technology detection for `it_system` artifacts (feature-gated, CMDB add-on)
Provider Knowledge Base — workspace-aware registry of hosting / CDN / email / analytics providers with jurisdiction (EU / US / other / unknown), seeded with ~50 hand-curated providers and growing automatically via scan-discovery
EU Sovereignty Score (0-100 + A-E grade) per artifact, with category-weighted breakdown (hosting 40%, email/auth 25%, CDN 15%, analytics 10%, other 10%)
US CLOUD Act exposure surfacing on scan results + propagation into FAIR scoring
IRB FAIR Maturity Matrix estimator from scan signals — full level descriptions per dimension stored alongside the score
SSRF-hardened scanner core — `validateScanTarget()` rejects private / loopback / link-local / cloud-metadata IP ranges with TOCTOU-safe IP pinning
BYOK Setup Wizard — guided multi-step flow (provider → test → model dropdown → managed-agent create → token usage)
Anthropic managed-agent BPMN tool integration — all 22 BPMN custom tools registered on the agent alongside `agent_toolset_20260401`
System-prompt teaching for the managed agent — explicit ProcesOS tool round-trip + result shapes baked into the agent body
Changed
BYOK key save now fails loudly when `WORKSPACE_KEY_ENCRYPTION_SECRET` is missing or misconfigured — silent encryption failure path closed
BYOK model-load now receives the API key explicitly from the connection test (no more post-save race against `getWorkspaceSecret()`)
Anthropic console link in BYOK setup updated to `platform.claude.com` (new Anthropic URL)
Fixed
Managed agent updates carry the version field the API requires for concurrency control, with one automatic retry on conflict
Empty star ratings in the validation wizard are visible against the background
v1.5.2
Wizard, Billing & Cost-Math Fixes + AI Model Discovery
Wizzy chat unbroken, Stripe boot-crash fixed, monthly cost math now probability-weighted, validation flow hardened. Plus AI model discovery dropdowns and password reveal on auth screens.
Added
Provider-agnostic model discovery in Admin AI Settings + Workspace BYOK Settings (dropdown after API-key entry, supports Anthropic / OpenAI / Mistral)
Anthropic skill / managed-agent listing in Admin AI Settings
One-click "Wizzy erzeugen" creates an Anthropic Skill agent idempotently (existing skill is reused, not duplicated)
Password reveal toggle (eye icon) on login, setup, and reset-password screens — preserves `autocomplete` for password-manager compatibility, aria-label i18n in en/de/es
Discovery-call CTA on the landing page linking to Proton Meet booking
Anthropic managed-agents Sessions API spike script (`scripts/spike-managed-sessions.ts`) — foundation for future Wizzy-on-Sessions integration
Changed
Stripe price-ID resolution is now lazy (resolved on first use, not at module import) — missing env vars no longer block server boot
Wizzy API now requires `spaceId` and resolves the AI provider per workspace (BYOK key + provider, then global, then env-var fallback)
Validation start now archives prior `validation_invite` notifications via `read: true` instead of deleting — audit trail preserved
Validation `complete` action performs the all-responsibles-validated check server-side and creates the AS-IS freeze atomically via CAS — no client-side race condition
Fixed
The AI assistant resolves the diagram's workspace on every message, so chat works from inside the editor
The server boots without a complete Stripe configuration — price identifiers resolve on first checkout instead of at startup
Monthly costs in the Analyze view weight each path by its probability, so a diagram with unconfigured gateways reports the real figure rather than up to three times it
The stakeholder validation Start button is disabled while a session is running, so a round cannot be started twice
A validation task on the dashboard opens the wizard directly
A process freezes to AS-IS automatically once every responsible stakeholder has validated
Auth screen sidebars fill their full height
v1.5.1
Legal, Security & Brand Hardening
TTDSG cookie consent, Terms of Service, GDPR-hardened legal pages, HTTP security headers, env-driven Stripe config, and a consistent ProcesOS brand across the app.
Quest publish validator now checks `visibility`, `context`, `evidenceSpec.kind`, `targetArtifacts` consistency, and optional `rewardSpec` (credentialType + xp + foundation-skill existence)
Q1g acceptance loop guards against non-`validation_session` evidence and issues reward *before* close-CAS for bounty-free path (failure leaves quest at `verified` for retry)
Marketplace QuestPublishPane hides bounty and party-kind fields for non-marketplace contexts
Workspace-creation routes (`/api/spaces/+server.ts`, `/api/spaces/from-template/+server.ts`) seed the default FAIR quest template
Cockpit page-load triggers a lazy quest-refresh (debounced, fire-and-forget with `.catch()` to prevent SvelteKit unhandled-rejection crashes)
v1.4.0
Maturity Epic Sealed + Cockpit Systems Tab
Maturity Epic #104 sealed: all 12 profile-types covered, age-tier-cap, admin-tunable weights, history sparklines. Plus Cockpit Systems tab with FAIR/ISMS scoring and 3-tier cost analysis.
Added
Maturity profiles for the 7 remaining ecosystem-roles (`district`, `association`, `organisation`, `transform_consultant`, `agency`, `government`, `solution_provider`) — no more silent business-fallback
Workspace-age tier cap (silver under 3mo, gold under 12mo, unlimited ≥12mo) with would-be-tier display in Cockpit Maturity hero
Admin-tunable maturity weights via Cybernetic Core — per-profile, per-dimension override with 1.0 sum validation
Maturity history snapshots (`workspaceMaturitySnapshots` collection) with daily-deduped 4-hour scheduler over active workspaces
Inline sparkline trend in Cockpit Maturity hero — per-dimension and overall score
`GET /api/spaces/[id]/maturity/history?days=N` endpoint with 5-min client-side TTL cache
Cockpit **Systems** tab — CMDB-sourced view of every IT system with FAIR / ISMS / contract / ESG / AI metadata
FAIR dimension visualization (5-segment horizontal bars per dimension, color-coded by level)
Framework filter toggles on Systems tab (GDPR / NIS2 / DORA / ISO27001) with OR-semantics across multi-select
Sort options on Systems tab — sovereignty / FAIR-score / name / cost / criticality, with rated-first / unrated-last for sovereignty + FAIR
Header counter badges on Systems tab — `X low sovereignty · Y not assessed` for at-a-glance pain-point context
3-tier cost analysis with execution multipliers and time-window calculations (path / process / global metrics)
`src/lib/bpmn/cost-math.ts` — pure-math helpers extracted as testable module (21 unit tests)
Changed
Maturity engine `getProfileFor` async-resolves admin overrides via derived-config; sync `getDefaultProfile` exposed for tests; `getProfileFor` kept as `@deprecated` alias
Maturity engine `getProfileFor()` default branch now only catches `null` / `undefined` ecosystem-role; all 12 roles resolve to dedicated profiles
Fixed
The workspace age notice uses correct plurals in all three languages
v1.3.0
Treasury, Maturity, Audience Pages
Workspace Treasury sealed end-to-end. Maturity engine + 12 dimensions visible in Cockpit. Six audience-targeted landing pages live. Plus dashboard worldmap, listing hardening, cockpit hub.
Dashboard worldmap with workspace + federation-peer markers, Nominatim-backed address search
Cockpit Übersicht redesign — summary-card hub with deep-links to detail tabs
GET `/api/spaces/[id]/maturity` (auth-gated, 5-min client-side TTL cache)
GET `/api/spaces/[id]/treasury/obligations` (any workspace member, returns `{ count, totalLovelace }` for live workspace-funded quests)
GET `/api/user/me/treasuries` (returns spaces where current user holds Head-of-Finance + a verified treasury)
ADR-0001: rating-infrastructure decision for the role-experience-variance dimension
Changed
`/api/marketplace/listings` GET returns tiered responses based on caller auth (anonymous → identity-stripped, authed non-member → `kind` only, creator-space member → full payload). Single batched membership lookup avoids N+1.
Treasury DELETE handler shares the same `getOpenObligationsSum` helper as the new obligations endpoint — single source of truth for open-escrow precondition.
Marketplace `?creator=<spaceId>` filter param threads through to listings GET — used by the worldmap quest-badge deep-link.
v1.2.0
Quest Marketplace & Compliance Cockpit
Demand-side marketplace: workspaces publish capability bounties in ADA, fulfillers deliver via blueprints, acceptance auto-triggers on GTT activation. Plus compliance cockpit + voting view.
Added
Quest Marketplace (Epic #95): publish a capability-activation bounty with ADA locked in Cardano escrow; fulfillers offer, deliver, and get auto-accepted on GTT activation
Quest discovery tab at /marketplace?type=quest with bounty/deadline/urgency card, scope badge (U→U / U→W / W→U / W→W), archive toggle
Inline OfferToFulfilDialog — no detail page, one-click from frontier-pill or marketplace-card to offer-submit
GTT Frontier bounty chip: any unblockable capability with an open quest shows an accent ₳-pill that deep-links into the offer flow
Automatic quest acceptance loop: when the required GTT node flips to `active`, matching open quests auto-advance to `verified` with forensic evidence (non-fatal sweep, CAS-guarded against double-writes)
quest_fulfilment credential minted on offer-accept; space-scoped lookup so it survives individual member departures
Workspace Cockpit Compliance Tab: cross-diagram aggregation with min() semantics, per-framework/jurisdiction heatmap, pain-point hero card, gap click-through
Multi-dimensional Delta View (BPMN + cost + resource + GTT + compliance) extracted into its own reusable component
Voter View for change proposals with credential-gated voting + weighted tallies + on-acceptance bounty release
Workspace Treasury backend primitive: non-custodial CIP-30 signData ownership proof, Mongo-backed nonce store with atomic consume-once replay protection, rotate/unset endpoints that respect open-escrow immutability (UI lands v1.3.0)
Changed
Validated AS-IS BPMN diagrams are now immutable — PUT handler returns 409 `edits_disabled_after_validation` once a governance validation session has locked the process; proposals must flow through the voting view
Marketplace browse query filters out expired quests (no auto-cron for published → expired) and self-authored quests (no circular self-nudge)
Compliance analysis moved server-side via bpmn-moddle, with a 5-minute client-side cache on the aggregated workspace compliance store
QuestPayload's `questParties.quester` is the single source of truth for funder identity — open-escrow states (`published`, `in_progress`, `verified`, ...) exported as `OPEN_QUEST_STATES` for cross-module reuse
Removed
User-level subscription model — licensing is workspace-only now; personal spaces cascade-delete with their owner
Operating Layer epic complete: unified paid-escrow marketplace across all item types, capability activation loop, sovereign workspace identity via KERI AID, Forms linked to DataObjects.
Added
Unified paid-escrow marketplace across blueprints, GTT capabilities, artifacts and workspace templates
PublishListingDialog: five-step type-aware publish wizard with early-draft persistence
Creator Analytics dashboard at /marketplace/creator with totals, 30-day trend chart, acceptance rate
Blueprint.producesGttSlug hook: run-context validation auto-activates the referenced GTT capability
Editor action "Solution from selected artifacts" — promote artifact-bearing tasks into a workspace solution node
Durable audit log for admin-triggered GTT frontier snapshots, surfaced in the admin debug view
KERI AID support via KERIA integration — per-workspace identity with on-chain registration (Cardano metadata label 7743)
Public workspace profile at /w/[slug] with tokenize.it invest-widget integration
Head-of-Finance role with treasury:manage permission scope
Forms now link to DataObjects; AI heuristic infers GDPR categories from field keys and labels
DataObject settings: linked-forms section + read-only form preview on the GDPR tab
30-day Pro trial on every new workspace (pre-Stripe launch)
Vitest infrastructure as first repo-wide unit-test runner
In-app Bug Report dialog creates GitHub issues via server-side PAT — no repo access needed for users
Changed
WorkspaceCreateModal rewritten on top of a live marketplace picker — any published workspace_template listing appears automatically
FilterBar sector dropdown expanded to full FoundationSector enum; gains optional priceTier opt-out
MarketplacePublishSettings now dispatches to the unified PublishListingDialog with preset type
Tier-gate removed from workspace creation — every new workspace starts Pro-trialing
Frontier admin UI renders a compact timeline table instead of prose snapshot metadata
UserTask properties panel always offers a Create-form button, not just an Edit button for already-linked forms
Fixed
Inline label editing is legible on every theme, caret included
Spell-check underlines no longer appear on BPMN element labels
The "Add form" dialog opens when you ask for it, rather than on every load of a diagram that already has forms
The form editor renders on the first open of the dialog
The lane roles tab loads instead of spinning indefinitely
Docker images build cleanly with the credential signing dependencies
Form save errors surface as a notification, and the list refreshes once a save succeeds
The forum credential badge renders for the Head of Finance role
The editor route renders server-side without error
Removed
Legacy /api/marketplace/templates/* endpoint family (use /api/marketplace/listings/* instead)
PublishWorkspaceDialog component (superseded by PublishListingDialog)
Per-creation module-checkbox add-ins on WorkspaceCreateModal (Launch-Trial activates all modules)
Recommendation-tier match-badge UI (tier-gate no longer relevant with Launch-Trial)
"What's New" banner in the layout, tied to the latest published release version
App version and changelog link in the footer
Forgot password flow — password reset directly from the login screen
Form.js integration for UserTask form definitions in the editor
Self-sustaining village demo workspace template (~125 seed documents)
World events stream and resource flow panel on the login screen
ProcesOS brand definition with tagline typewriter in the hero section
/marketplace/how-it-works transparency page with links to validator and signer source
Changed
Lane roles auto-register workspace-wide on diagram save
Credential gate: hard for responsible, soft warning for contributor/viewer
Archived roles auto-reactivate when the same lane name reappears
Cardano NFT portfolio now queries by stake address for full HD wallet coverage
Fixed
Cardano network selection is explicit — an unconfigured network is refused rather than quietly falling back to preprod
Login map connection lines are subtler, and quest bubbles stay inside the viewport
v1.0.0
ProcesOS — The Process Operating System
Initial release of ProcesOS: a multi-tenant process management platform combining BPMN 2.0, DMN decision tables, AI assistance, process governance, and capability planning into a composable process execution language for organizations.
Added
BPMN 2.0 editor with bpmn-js — full diagram modeling, auto-save, translation overlays, auto-layout (ELK.js)
AI Wizard Assistant — multi-turn AI chat for diagram creation and modification (Anthropic, OpenAI, Mistral providers)
DMN Decision Tables — dmn-js integration linking BusinessRuleTask elements to reusable decision table definitions
Multi-tenant workspaces with subscription tiers (free, pro, team, enterprise) and feature gates
Process Governance — AS-IS/SHOULD-BE versioning, stakeholder validation wizard, change voting
Global Technology Tree (GTT) — 5-element capability planning (Fire/Water/Earth/Air/Aether) with status machine and unlock cascades
CMDB — IT systems registry with cost tracking, license management, FAIR assessment, and ESG data
Data Objects library with GDPR classification (personal data flags, legal basis, retention periods)
Resource tracking with carbon footprint analysis per process path
Cost & ROI analysis — per-task cost modeling, lane costs, process-level analytics with currency support
Compliance analysis — regulatory gap detection, DPIA/GDPR fields, EU AI Act properties (Art. 14, 26)
FAIR Score assessment for IT systems (Transparency, Accountability, Interoperability, Data Sovereignty, Human Oversight, Local Adaptability)
Discussion forum with credential-gated access, diagram linking, AI insights, and change proposals
Gamification — XP-based skill system with bronze-to-diamond tiers, foundation skill graph, and mastery levels
