Skip to main content

Changelog

All notable changes follow Conventional Commits v1.0.0. Format: type(scope): description.

Types used in this repository: feat · fix · chore · refactor · test · docs · perf · freeze.

GitHub repository: Platform-Kernel

Unreleased — M10: Documentation​

Period: 2026-04-19 → present

Documentation phase. Code frozen after M9. Zero-Debt policy. All 12 Go services and 22 TypeScript packages at >80% test coverage. golangci-lint v2 + markdownlint-cli2 0 warnings.

  • docs: Docusaurus v3 documentation site — architecture, API reference, self-hosting guides (Batches 34–42)
  • docs(arch): Architecture diagrams — C4 system view, service-map, CDC pipeline, security deep dive, tenant isolation, observability, deduplication, deployment, testing strategy
  • docs(api): gRPC API reference — IAM, Billing, Data Layer, Events, Module Registry, Integration Hub
  • docs(self-hosting): Infrastructure guides — requirements, Docker Compose, Kubernetes, configuration, Vault, monitoring, backup and recovery

0.9.0 — M9: Testing and Observability Hardening​

Period: 2026-04-07 → 2026-04-19

Milestone 9: Full CI/CD pipeline, contract tests (Pact), load tests (k6 14K RPS), B2B2B multi-tenancy, GDPR crypto-wipe, security patches.

  • feat(gdpr): GDPR deletion state machine, crypto wipe pipeline, compliance verification — 2026-04-19
  • feat(gateway): B2B2B delegation middleware (Phase 3) — 2026-04-18
  • feat(data-layer): tenant hierarchy schema (Phase 2) — 2026-04-18
  • feat(iam): B2B2B hierarchical multi-tenancy (Phase 2) — 2026-04-18
  • feat(phase-8): integration and unit tests for Notify and Money services — 2026-04-13
  • feat(files): Phase 7 — bimg + ClamAV real integration — 2026-04-13
  • feat(m9): Phase 2-6 — CI/CD pipeline, Pact contract tests, k6 load tests, E2E, Renovate Bot — 2026-04-12
  • feat(mf): Module Federation 2.0 runtime bootstrap + sdk-ui pure ESM build — 2026-04-04
  • fix(security): patch protobufjs < 7.5.5 and dompurify <= 3.3.3 CVEs — 2026-04-18
  • fix(files): paranoid lead architect audit — 10 defects resolved (null safety, error paths, race conditions) — 2026-04-13
  • fix(iam): flaky MFA crypto_test — os.Unsetenv → t.Setenv — 2026-04-04
  • fix(concurrency): eliminate data races in xds SnapshotManager and event-bus mock — 2026-04-06
  • chore(m9): audit hardening, unit tests Money service, pnpm 10.33.0 — 2026-04-15
  • chore(deps): April 2026 toolchain modernization + security hardening — 2026-04-07
  • chore(deps): migrate all catalog-eligible deps to SSOT catalog — 2026-04-07
  • chore(deps): React 19.0.0 → 19.2.4 (fix Invalid hook call) — 2026-04-07
  • refactor(ts): consolidate tsconfig — single tsconfig.json per package, remove tsconfig.test.json — 2026-04-05

0.8.0 — M8: Billing and Integration Hub​

Period: 2026-03-26 → 2026-04-06

Milestone 8: Billing service (Stripe webhooks, plan lifecycle) and Integration Hub (external API proxy, DLQ, per-provider rate limiting) — both primitives FROZEN.

  • freeze(M8): Billing + Integration Hub primitives frozen — 2026-03-30
  • feat(billing): Kafka publisher, Handler/Repo/Worker coverage, Block I Docker infrastructure — 2026-03-30
  • feat(gateway): billing middleware + Kafka cache invalidation — 2026-03-30
  • test(integration-hub): achieve >80% unit test coverage — 2026-03-29
  • refactor(kernel): unify SQL to pgx/v5 + sqlc across all Go services (pre-M9 cleanup) — 2026-04-02
  • fix(lint): enterprise-grade lint remediation — 805 warnings resolved across 17 services — 2026-03-31

0.7.0 — M7: Feature Flags and Domain Resolver​

Period: 2026-03-23 → 2026-03-28

Milestone 7: Feature Flags (GoFeatureFlag, per-tenant, SDK cache 15s) and Domain Resolver (ACME/Let's Encrypt, custom domains, TLS Vault storage) — both primitives FROZEN.

  • freeze(M7): Feature Flags + Domain Resolver primitives frozen — 2026-03-28
  • feat(integration-hub): enterprise gRPC rework + security audit fixes — 2026-03-28
  • fix(acme): prevent int64 overflow in ExponentialBackoff for large attempt values — 2026-04-06
  • fix(acme): auto-derive backoffMaxAttempt + fix GHA context injection — 2026-04-06
  • refactor(acme): replace math.Pow with integer bit-shift in ExponentialBackoff — 2026-04-06
  • refactor(ci): eliminate all hardcoded versions — single source of truth — 2026-03-26

0.6.0 — M6: SDK Distribution and Data Layer OpenAPI​

Period: 2026-03-18 → 2026-03-23

Milestone 6 FROZEN: Data Layer OpenAPI spec finalized, SDK distribution builds passing for all 11 @platform/* packages, sdk-ui Storybook clean.

  • freeze(M6): Data Layer OpenAPI spec + SDK dist builds — all verification PASSED — 2026-03-23
  • feat(sdk-ui): <ImageUpload>, <EmbedCodeBlock>, Design System distribution — 2026-03-22
  • fix(build): separate JS bundling (tsup) from DTS generation (tsc -b) for composite SDK packages — 2026-04-05
  • fix(ci): enterprise lint architecture — matrix strategy + generated-file exclusions — 2026-04-05
  • chore(deps): @types/node 22.13.10 → 25.5.2 (Node 24 LTS) — 2026-04-06

0.5.0 — M5: UI Shell and Design System​

Period: 2026-03-15 → 2026-03-21

Milestone 5 FROZEN: UI Shell (Vite 8 + React 19 + Module Federation 2.0) and Design System (@platform/sdk-ui) production-ready.

  • freeze(M5): UI Shell + Design System frozen — 2026-03-21
  • feat(ui-shell): Module Federation 2.0 host + remote loading — 2026-03-19
  • feat(sdk-ui): Design System tokens, Storybook, component library — 2026-03-18

0.4.0 — M4: Module Registry​

Period: 2026-03-14 → 2026-03-15

Milestone 4 FROZEN: Module Registry (manifest validation, gRPC activation, RBAC sync) and UI Shell PoC.

  • freeze(M4): Module Registry + UI Shell PoC frozen — 2026-03-15
  • feat(module-registry): gRPC RegisterModule, ActivateModule, DeactivateModule + permission sync — 2026-03-14

0.3.0 — M3: Core Primitives​

Period: 2026-03-11 → 2026-03-14

M3 comprises three sub-milestones frozen sequentially.

M3c: Money Service (2026-03-14)​

  • feat(money): Wallet CRUD, ACID credit/debit, hold/confirm/cancel, reversal (365d window), double-entry, deadlock prevention — FROZEN

M3b: Notify and Files Services (2026-03-14)​

  • feat(notify,files): Notification Service (WebSocket + RabbitMQ retry, channels, templates) + File Storage (S3, presigned URLs, ClamAV, libvips) — FROZEN

M3a: Audit Service (2026-03-14)​

  • feat(audit): Audit Service (ClickHouse ReplacingMergeTree, dual-write Kafka + PostgreSQL WAL fallback, GDPR anonymization) — FROZEN

0.2.0 — M2: Event Bus​

Period: 2026-03-12 → 2026-03-13

Milestone 2: Event Bus service with 8 Kafka domain topics, RabbitMQ transactional queues, Avro schema validation, per-tenant filtering.

  • feat(event-bus): Kafka 3.9.0 KRaft (8 topics), RabbitMQ queues, dedup (Valkey), DLQ — FROZEN

0.1.0 — M1: Core Infrastructure​

Period: 2026-03-11 → 2026-03-12

M1b: IAM Service (2026-03-12)​

  • freeze(iam): IAM primitive v1.0 frozen — ES256 JWT, Argon2id, TOTP MFA, RBAC, OIDC, multi-tenant hierarchy — 2026-03-12
  • feat(iam): OAuth application management, pluggable auth providers, invite flow

M1a: Data Layer (2026-03-11)​

  • freeze(data-layer): Data Layer primitive frozen — CRUD over PostgreSQL, RLS, CDC via Debezium, ClickHouse analytics — 2026-03-11
  • feat(data-layer): Row-Level Security (RLS), SQL migrations, sqlc config, Go infrastructure (config, DB pool, health)

0.0.1 — M0: Monorepo Scaffold​

Period: 2026-03-10 → 2026-03-11

Initial commit and monorepo scaffold. No production code — directory structure, toolchain, Docker Compose, and CI placeholders only.

  • chore(M0): init monorepo — Bazel 9.x, Go 1.24, pnpm, Buf Protobuf — 2026-03-10
  • chore(M0): linter configs, package.json, tsconfig, .env.example — 2026-03-10
  • chore(M0): Docker Compose — PostgreSQL 17, Valkey 8.1, Kafka 3.9.0 (KRaft), RabbitMQ 4.1, ClickHouse 25.3 — 2026-03-10
  • chore(M0): scaffold 12 Go services (stubs with health endpoints) — 2026-03-10
  • chore(M0): scaffold 22 TypeScript packages (@platform/*) — 2026-03-10
  • chore(M0): scaffold Protobuf schemas, sandbox, migrations, CI placeholders — 2026-03-10
  • freeze(M0): M0 marked FROZEN — 2026-03-11

See Also​