BastionProof Changelog
A simple, public record of BastionProof updates.
Coming soon (high level)
These are next-step improvements currently in planning and active design.
- Implement signed PDF reports similar to the trust flow now used for file exports.
- Add email and in-app system notifications when new external submission reports are received.
- Add exportability to external submissions so request/report evidence can be packaged similarly to case exports.
- Optimize image handling on the external submission page for faster loading and smoother uploads.
- Deliver UI/UX optimization on the external submission page to improve submitter and reviewer workflows.
- Additional case-management polish is planned to keep folder, archive, and external request workflows fast as account activity grows.
- Retention and billing reporting improvements are planned so subscription-state automation is easier to audit and support.
Releases
Focus: launched video capture integration, completed file export and purge automation, and shipped broad capture and language polish across photo/video and export flows.
- Added video capture integration to support evidence collection with both photo and video workflows directly in the product experience.
- Added end-to-end case export package flow with create, list, detail, download, and confirm-delete API endpoints plus backend helpers for export generation and lifecycle tracking.
- Launched export purge controls and cleanup automation with retention-aware purge logic, scheduled cleanup jobs, and safer delete-after-export handling to prevent storage drift.
- Included export verification tooling with package verification scripts, export flow documentation, and broad regression coverage for export creation, retention, and deletion edge cases.
- Shipped UI/UX fixes around photo and video capture to improve reliability and reduce friction in real-world mobile field sessions.
- Expanded language support around PDF exports and file export/purge flows for a more consistent multilingual experience in export-related paths.
- Improved case operations and storage accounting by tightening archive-related flow behavior and excluding export artifacts from active storage quota calculations.
- Delivered additional small fixes across supporting case and export workflows for stronger production stability.
Focus: launched storage tiers with safer subscription/add-on handling, clearer confirmations, and stronger Stripe sync reliability.
- Added storage tiers and add-on lifecycle controls so customers can scale storage without switching base plans.
- Prevented storage upgrades from creating duplicate subscriptions by routing add-on changes through the correct billing path.
- Improved Stripe sync and self-heal behavior for storage add-ons to recover account state when webhook/order timing varies.
- Fixed storage checkout success edge cases and hardened confirmation flows to reduce failed post-payment states.
- Aligned storage upgrade and removal confirmations across settings and dashboard screens for a more consistent account-management experience.
Focus: expanded Spanish-language support, improved external submission follow-through, and polished exported evidence reports.
- Expanded bilingual support across the core app with broader Spanish translations, language toggles on share and request pages, and a saved language preference for signed-in users.
- Refined public-facing request and share pages by improving translated copy, removing unneeded request notes from the public flow, and tightening disclaimer styling.
- Improved external submission completion flow with a dedicated thank-you page and cleaner post-submit experience.
- Polished PDF evidence exports with better map readability, offline map fallback, improved verification output, safer link rendering, and updated report branding.
- Added account data-usage UI and small mobile fixes including usage visibility on the app side and a menu layering fix on the jobs page.
Focus: finished offline capture support, expanded subscription lifecycle automation, and polished external submissions plus case management workflows.
- Launched working offline mode for photo capture with queued uploads, stronger mobile browser storage handling, and safeguards that prevent auto-upload attempts while offline mode is enabled.
- Completed payment and subscription billing integration so checkout, resubscribe flows, and billing links stay consistent across the product.
- Added cancellation retention automation with 30- and 60-day reminder emails plus 90-day cancelled-account database wipe handling.
- Expanded the External Submission feature with shareable request links, dashboard indexing, archive controls, verify-all review flow, better photo preview/storage handling, and faster reviewer workflows.
- Cleaned up the case folder and dashboard UI with archive/reactivate flows, clearer separation between cases and external requests, and broader capture/settings polish.
Focus: completed payment integrations and rebranding updates, then triaged migration-related regressions.
- Completed payment integrations to support live subscription and billing workflows.
- Finished rebranding updates across product surfaces for consistent naming and visuals.
- Identified new PDF exportable bugs after migration and moved PDF export fixes back into the active roadmap queue.
Focus: moved capture fully in-app for a faster, more consistent evidence-photo flow across devices.
- Removed native device camera handoff and brought photo capture directly into the in-page experience for tighter workflow control.
- Added HD in-page capture support to improve image quality for claim-grade evidence detail.
- Improved frame and composition controls so users can position shots more accurately before saving.
- Optimized retake logic and capture flow speed to reduce friction when users need another shot.
- Cleaned up redundant legacy styling by removing deprecated stylesheet assets.
Focus: expanded platform capabilities, hardened auth security, and added rollout controls for closed beta growth.
- Added object storage support to improve upload durability and prepare for growth␊ beyond local disk constraints. ␊
- Introduced analytics instrumentation to improve insight into product usage and guide release priorities.
- Launched forgot-password flow so users can securely recover account access without admin intervention.
- Delivered a dashboard experience for faster visibility into cases and account activity.
- Future-proofed the case view architecture to support upcoming enhancements with cleaner long-term maintainability.
- Hardened CSRF protection and validation flow with improved token checks, dedicated token endpoint logic, and clearer error handling in auth paths.
- Fixed login CSRF edge-case behavior that could block valid sign-in attempts in specific browser/session scenarios.
- Cookie/login persistence logic to keep users safely logged in on trusted devices.
- Introduced closed beta gating after signup threshold to control rollout pace once early-access capacity is reached.
Focus: recover clean functionality after merge conflicts, complete server/database migration work, and deliver reliable multi-user account membership behavior.
- Recovered key feature flow after merge issues — fixed case creation/view SQL references, repaired share/create-share/public-verify behavior, and restored expected logout/session handling.
- Migrated deployment path and schema evolution for MySQL/server moves — aligned
share_linksmigration behavior, updated migration documentation, and improved upgrade safety checks for existing environments. - Added stronger multi-user membership integrity — improved login diagnostics, backfilled/validated organization membership relationships, and gated fallback org creation only for true orphaned users.
- Improved public evidence verification reliability — updated anonymous evidence lookup and case ID rendering so shared verification links remain dependable.
Focus: stronger evidence integrity + better mobile capture flow + more reliable uploads + test reset tooling.
- Public hash verification on shared evidence pages (PR #3) — integrity checks can be validated by viewers.
- Improve mobile camera capture UX + full-domain share actions (PR #4) — faster field workflow and cleaner sharing.
- Switch to native mobile camera capture with pre-submit review (PR #5) — capture with a review step before upload.
- Add derivative image pipeline + reliable AJAX upload flow (PR #6) — smoother upload success under real-world conditions.
- Add temporary admin full-reset button for testing (PR #7) — quick wipe/reset for repeat testing cycles.
Focus: initial MVP build and early stabilization.
- Build BastionProof MVP PHP web app for claim-grade photo evidence (PR #1) — baseline app scaffolding and core flow.
- Pull request (PR #2) — early iteration / refinements.