AdvisoryAI Changelog

2026-07-12

• OpsMemory tenancy is claim-bound (breaking for any caller that relied on naming its own tenant). Every /api/v1/opsmemory/* endpoint now isolates on the authenticated stellaops:tenant claim (OpsMemoryTenantResolver); the route group carries .RequireTenant(). The tenantId query parameter and RecordDecisionRequest.TenantId body field became optional conflict checks: a value that disagrees with the claim is rejected with 400 / error_code: tenant_conflict, and a request carrying no tenant claim is rejected with 400 / error_code: tenant_missing. Previously the caller-supplied tenantId was passed to PostgresOpsMemoryStore as the sole isolation key. Sprint SPRINT_20260712_001 (TEN-1); contract in architecture.md §15.

2026-02-25

• Unified search security hardening:
  • Tenant-scoped chunk/doc IDs for findings, VEX, and policy live adapters to prevent cross-tenant identity collisions during incremental indexing.
  • Backend and frontend snippet sanitization tightened to strip script/HTML payloads before rendering.
  • Threat model for unified search added to knowledge-search.md (tenant isolation, injection, XSS, query-amplification controls).

2026-02-24

• Unified search migration and deprecation updates:
  • Platform catalog entities are ingested into unified search so type-level platform navigation is available from /v1/search/query.
  • Legacy search endpoint /v1/advisory-ai/search emits Deprecation: true and Sunset: Thu, 31 Dec 2026 23:59:59 GMT.
  • Consumer migration target: move all search consumers to /v1/search/query before the sunset date.