ÄnderungsprotokollWas wir veröffentlicht haben
Was wir veröffentlicht haben, in einfacher Sprache.
Dieselben Release-Notes, die unsere Pilotkunden sehen, am Tag der Veröffentlichung. Funktionen, Fehlerbehebungen, Sicherheitsarbeit und Übersetzungen.
März 2026— 1
- v1.0
Initial release — The Veil v1.0
NeuNeuNeuFirst production release with full split-knowledge architecture, PII sanitizer, and Veil Protocol attestation.
What's new
Split-knowledge inference proxy
The core
/api/v1/proxy/messagesendpoint is now in production. Submit aprompt_templatewith namedcontextplaceholders — context values are routed through the PII sanitizer and ID Bridge before reaching Sandbox B. The AI never sees identity data.PII Sanitizer — three layers
- Layer 1: Known-entity matching using Cologne phonetics and Levenshtein distance (active on
/service/analyzepath) - Layer 2: Presidio NER with spaCy DE/EN models and custom German recognisers — active on all inference paths
- Layer 2.5: Quasi-Identifier Risk Engine — scores re-identification risk from field combinations using k-anonymity and l-diversity
The Veil Protocol
Every inference request now produces a cryptographically signed VeilCertificate:
- Ed25519-signed claims from all pipeline services
- External co-signing via RFC 3161 TSA and Sigstore Rekor
- Three certificate views: technical proof, DPO summary, regulatory mapping (GDPR Art. 25/32, EU AI Act Art. 10/15)
Account portal
Self-service account management at
/account/— view usage, manage license, download deployment configs, and contact support.Breaking changes
None — this is the initial release.
Upgrade notes
Deploy using the Helm umbrella chart at
deploy/helm/. Seedocs/superpowers/specs/2026-03-21-helm-k8s-deployment-design.mdfor the full deployment guide. - Layer 1: Known-entity matching using Cologne phonetics and Levenshtein distance (active on
Was kommt als Nächstes?
Die Roadmap zeigt, was wir in diesem Quartal entwickeln, was als Nächstes ansteht und was zurückgestellt ist — mit den Gründen.