Changelog

Notable changes to Assay. Entries are written by hand, because a list generated from commit messages is a list nobody reads.

19 September 2026

Public documentation. This site. Candidate transparency, a privacy notice, a security overview and an API reference, published at assay.kravos.tech.

API description. The orchestrator now generates an OpenAPI description from the route schemas it validates against, covering 37 operations. It is regenerated from the server rather than maintained by hand, so it cannot drift away from what the API does.

Request validation. Hand-written validation on nine endpoints replaced with declared schemas. One endpoint that checked its fields were present but never that they were well formed now rejects malformed identifiers with a 400 instead of failing with a 500.

Earlier

Assay is pre-release and was not publishing release notes before this date. Changes prior to this point are recorded in the repository’s architecture decision records rather than here.