Changelog

This page tracks product, API, and risk-workflow updates.
You can see exactly what changed, when, and why.

2026

v2.5.6 LATEST

Current production release.

  • Changed: Homepage hero now uses a single smart combined input. Paste a URL or contract text into one textarea — the tool detects intent and routes to the right check automatically. Live hint text confirms which mode is active before you click Analyze.
  • Added: Floating mission board — a collapsible progress pill (Lv.1 / pts) anchored to the bottom-right corner that persists across all public pages. State is saved locally; no account needed. The board appears on every page that loads site.js.
  • Changed: Mission 4 replaced. "Submit a new scenario idea" (hard to complete, no clear confirmation) replaced with "Try the risk triage router" — selecting a scenario from the Urgent Playbooks section now awards the points.
  • Improved: Mission progress updates are now event-driven (sprimeMissionAwarded custom event) so the floating board stays in sync across page sections without tight coupling.

v2.5.5

Previous release.

  • Added: ToS Library — 60+ services across 9 categories (social, streaming, finance, shopping, productivity, gig, gaming, security, creator) with representative problematic clause patterns. Available from the homepage hero and the full Clause Lab.
  • Added: Tabbed interface on the Clause Lab page: "Paste text" tab retains existing flow; new "ToS Library" tab lets users browse by category, preview risk level + summary, and load + analyze in one click.
  • Added: "Browse ToS Library" toggle in the homepage hero input meta row. Expands an inline panel with category filters, service select, and one-click "Load & Scan" into the contract trap scanner.
  • Improved: Clause analyzer extended from 21 to 36 detection patterns. New traps: broad content license, AI training opt-outs, data sharing consent, price change unilateral, account suspension without cause, warranty disclaimer, non-disparagement, opt-out burden, class action waiver, liability cap waiver, device surveillance, personal guarantee, biometric collection, business transfer data transfer, soft data monetization language, and cancellation fees.
  • Improved: Two-sentence sliding window scanning — the analyzer now checks adjacent sentence pairs to catch split-sentence clause patterns that evade single-sentence regex.
  • Improved: Nine new combined-risk interaction warnings added (e.g., "Data Monetization + AI Training", "Escape-Proof Subscription Trap", "Obscured Data Training Pipeline").
  • Fixed: Contract Clause Translator layout regression. The page wrapper was using the homepage 2-column grid class (hp-hero-inner), causing the form and result area to appear squeezed. Replaced with new cc-page-inner single-column layout.

v2.5.4

Previous release.

  • Changed: Homepage hero is now contract-text-first. The primary flow scans pasted terms for traps instead of defaulting to URL checks.
  • Added: Real-world style sample clause sets in the hero for instant demos when users do not have text ready.
  • Added: Mission + points progression in the hero (local-only) to increase replayability with no purchase requirement.
  • Added: Homepage contract preview now calls POST /v1/contract-clauses and shows risk snapshot, trap highlights, and next-step guidance.
  • Improved: Conversion telemetry allowlist now includes contract scan and sample-load events for this new funnel.

v2.5.3

Previous release.

  • Added: Homepage conversion telemetry endpoint POST /api/conversion-event with strict event allowlist, event-context sanitization, and IP-based abuse rate limits.
  • Added: Firestore analytics stream conversion_events for triage flow, verify starts, preview renders, and checkout-start conversion tracking.
  • Improved: Homepage instrumentation now captures key funnel signals (triage scenario selection, CTA clicks, verify starts, suggestion submits, checkout starts) without blocking user actions.
  • Fixed: Featured Starter plan "Popular" badge no longer gets crossed by the highlighted card border.
  • Updated: Privacy Policy and Terms now explicitly disclose conversion telemetry collection, hashing, and retention timelines.

v2.5.2

Previous release.

  • Added: Homepage Urgent Playbooks section with audience-specific safety routines (parents/boomers, Gen Z marketplace buyers, freelancers/teams).
  • Added: Interactive homepage triage router: select a high-risk situation and get immediate next actions with direct tool links.
  • Improved: Readability pass across shared UI: larger baseline typography, larger labels/buttons, and stronger small-text legibility on core decision screens.
  • Improved: Theme consistency across public pages: unified footer structure and resource navigation for homepage, tools, legal, docs, changelog, dashboard, and AlertPrime pages.
  • Improved: Overflow resilience: long URLs/code labels now wrap safely to prevent clipping on narrow screens.
  • Changed: Public copy rewritten to remove synthetic wording and focus on practical security urgency and peace-of-mind outcomes.

v2.5.1

Previous release.

  • Changed: Homepage is now explicitly conversion-first for real-money offer decisions. Hero copy, section flow, pricing language, and FAQ now focus on “check before paying” outcomes.
  • Changed: API-centric mid-page sections were replaced with consumer decision flow and scenario cards. Developer access remains available via the Developers page and paid plans.
  • Added: Homepage scenario intake now submits to backend: POST /api/tool-suggestion.
  • Added: Scenario suggestions are stored in Firestore tool_suggestions with timestamp and SHA-256 client-IP hash, and operator alert emails are sent via notifyOperator().
  • Improved: Suggestion UX no longer drops user input silently; users now get explicit success/failure states.
  • Improved: Legal docs updated to disclose homepage scenario submissions and related retention/processing details.

v2.5.0

Previous release.

  • Added: Payment Safety Checker: before you send money, get an instant breakdown of whether the payment method is reversible, what consumer protections apply, and safer alternatives. Powered by POST /v1/payment-safety.
  • Added: Contract Clause Translator: paste any terms, offer email, or agreement and get plain-language explanations with exact sentence citations and severity ratings. Powered by POST /v1/contract-clauses.
  • Added: Offer Monitor: set a URL once and get a record of every change so you have evidence if terms shift after you've paid. Free: 1 monitor, Starter: 10, Pro: 50. Powered by POST /v1/monitors and related routes.
  • Fixed: Webhook delivery tests no longer time out. The async contract was racing against an 11-second internal retry delay; tests now attach .catch() without await.
  • Improved: Homepage Verify Suite section: all four tools now show Live badges with direct links.
  • Improved: Copy pass across all public pages: replaced em-dashes with natural punctuation and removed stiff phrasing throughout.
  • Improved: Terms of Service and Privacy Policy rewritten with plain language, governing law (California), GDPR and CCPA rights, no-model-training clause, and explicit data retention timelines.

v2.3.0

  • Added: Sprime Verify: submit any URL to get a real-time trust assessment with WHOIS, TLS, DNS, and content signals bundled into a structured Proof Pack report.
  • Added: GET /v1/verify?url= endpoint works without an API key for one-off checks; authenticated requests get plan-level cache TTL, Firestore logging, and quota tracking.
  • Added: Verify hero on the homepage: paste a URL, get an instant inline preview, then open the full report at /verify.html.
  • Added: URL handoff via ?url= query param: the homepage prefills and auto-triggers the verify input on the report page.
  • Added: Signed-out users see a save-CTA strip after a successful verify check, prompting account creation to unlock report saving and watchdog alerts.
  • Improved: Design refresh across all pages: aurora ambient glow, scroll-reveal animations, button shimmer, and gradient accent bars on featured pricing cards.
  • Fixed: Copy pass across all public pages: removed em-dashes, humanized stiff phrasing throughout.

v2.2.1

  • Improved: Plan-aware burst rate limits per API key: Free 30 req/min, Starter 120 req/min, Pro 600 req/min.
  • Improved: Batch limits enforced by plan: Free max 10 items, Starter max 25, Pro max 75, with matching concurrency.
  • Changed: Batch items count toward daily quota per item and are reserved atomically at authentication time.
  • Improved: Webhook delivery no longer blocks request processing; deliveries are fire-and-forget.

v2.2.0

  • Added: GET /v1/context, which pulls weather, crypto, and news in a single call so dashboards need fewer round trips.
  • Added: /v1/context accepts location, lat/lon, coin/symbol, and category with sensible defaults.
  • Improved: If one data source is down, /v1/context still returns the others instead of failing entirely.
  • Improved: /v1/news and batch news try multiple providers before returning empty.
  • Fixed: Cache reads and writes are now properly awaited, preventing stale data on all endpoints.
  • Fixed: Quota tracking now counts /v1/webhooks/* and /v1/echo requests.
  • Improved: /v1/context now appears in the GET /v1/endpoints discovery response.

v2.1.1

  • Added: /openapi.yaml for typed client generation.
  • Added: Webhooks (Beta) now cover crypto price thresholds, weather alerts (temp_above, temp_below, wind_above), and news keyword matching.
  • Added: News webhooks support category and keyword filtering with article URL deduplication.
  • Security: Webhook URLs validated at registration and again at delivery to prevent DNS rebinding.
  • Improved: Webhook deliveries capped at 1 per hour per webhook.
  • Security: Signup rate limiting (3/hour per IP, 24-hour cooldown per email).

v2.1.0

  • Added: Response caching layer. Repeated requests return cached data without hitting upstream providers.
  • Added: News endpoint switched to NewsAPI.org with 7 categories (general, business, technology, sports, entertainment, health, science).
  • Added: fields parameter on data endpoints, request only the fields you need to reduce payload size.
  • Added: X-Cache-Hit response header indicates whether data came from cache.
  • Added: GET /v1/crypto/trending for currently trending coins.
  • Added: GET /v1/crypto/rankings for top coins by market cap, with pagination.
  • Added: market_cap field included in crypto price responses.
  • Improved: Usage tracking writes batched to reduce backend write volume.
  • Added: fresh=true on weather endpoint to bypass cache and fetch live data.

v2.0.1

  • Fixed: Removed GraphQL and diff endpoints from docs (not yet implemented).
  • Fixed: Clarified webhook trigger model: webhooks fire on API requests (event-driven), not background polling.
  • Fixed: Corrected temperature unit default in docs (celsius, not fahrenheit).
  • Fixed: Updated sample responses to show actual weather condition codes instead of strings.
  • Deprecated: Translation parameter removed from news endpoint (was never implemented).

2025

v2.0.0

  • Added: Webhook registration for crypto price threshold alerts (Pro plan).
  • Added: POST /v1/batch for sending up to 10 requests in one call.
  • Added: Temperature unit conversion (celsius, fahrenheit, kelvin) via the format parameter.
  • Added: Keyword-based sentiment field on news headlines.
  • Improved: Error responses now include specific provider status codes for easier debugging.

v1.2.0

  • Added: Live usage dashboard with real-time quota tracking.
  • Improved: Unified navigation across all pages.
  • Fixed: Mobile viewport overflow on iOS Safari.
  • Fixed: Rate limiting accuracy for edge cases near midnight UTC.

v1.1.0

  • Added: Stripe payment integration for Starter and Pro plans.
  • Added: SendGrid email delivery for API key distribution.
  • Fixed: Cache invalidation timing for crypto endpoint.
  • Improved: Latency on cached requests reduced.
  • Improved: Updated Open-Meteo API version for better weather accuracy.

v1.0.0

  • Added: Initial public release with weather, crypto, and news endpoints.
  • Added: In-memory caching for user data and usage tracking.
  • Added: Firestore for persistent user and usage storage.
  • Added: Deployed on Google Cloud Run.

v0.9.0-beta

  • Added: Beta testing phase with limited access.
  • Fixed: JSON schema inconsistencies across providers.
  • Fixed: Authentication middleware edge case with malformed keys.
  • Added: Domain sprime.us acquired and DNS configured.

v0.5.0-alpha

  • Added: Initial prototype with weather and crypto aggregation.
  • Added: Provider reliability testing across Open-Meteo, CoinGecko, and SpaceFlight News.
  • Added: Proof-of-concept response normalization layer.