Every release that shaped the grading instrument, newest first. Dates and versions are exact.
Developer surface: API, CLI, and MCP
Public API reference at /docs/api, generated from the canonical OpenAPI contract so it can never drift.
CLI reference at /docs/cli for the rubrkit npm package: pull, validate, test, audit, eval, and report.
MCP server docs at /docs/mcp with the full tool catalog and connection config.
Collapsed the separate doc links into a single Docs menu in the header.
Audit and proof reliability
Audit jobs no longer stall when a rubric dimension returns zero findings.
Proof report exports retry transient blob-storage failures instead of failing the job.
Tightened API-key scope checks on file-write endpoints so a read-only key can never mutate a bundle.
Evals and proof reports
Eval runs that score rubric-backed test cases against a rewrite.
Exportable proof reports that show an instruction held up to its eval.
The credits ledger now previews the cost of a run before you start it.
Version-history fixes
Restoring a file version now writes a new version instead of overwriting history.
Corrected an off-by-one in bundle version-history pagination.
Artifact-bundle versioning
Full version history for artifact bundles and individual files.
Restore any prior bundle or file version from the dashboard or API.
File uploads are content-addressed, so identical content no longer creates duplicate versions.
rubr_flow polish
The rubr_flow validator now accepts the optional ON and STATE blocks.
Conversion job progress events now stream in order.
rubr_flow conversions
Convert a loose instruction into a bounded rubr_flow procedure through the API.
A dedicated rubr_flow page covering the anatomy, how to write one, and worked specimens.
Examples and dashboard
A before-and-after examples gallery showing weak instructions graded and rewritten.
The dashboard bundle list now shows each bundle’s last-audited score.
Contact and newsletter forms now confirm submission with a snackbar instead of a silent reset.
Auth hardening
Login tokens are verified before an identity is mapped to a Neon-backed user.
Expired or revoked API keys now return a clear unauthorized error instead of a generic failure.
Public API preview
Scoped API keys with explicit read and write scopes per resource.
Artifact-bundle, file, and audit endpoints under /api/v1.
Async job polling for long-running audits and conversions.