Changelog

Cloud sign-in now follows the verified email of the existing company owner while preserving company data and access boundaries.

Improved compatibility for company workflows and document operations, with strict checks on permitted actions and proposal contents.

Reduced the download size while keeping the same interface and browser behaviour.

permalink ↗

Company data now has a dedicated encrypted store and independent write queue within one Railbase installation. Shared sign-in continues to enforce each company's membership and access permissions.

• New installations use separate company stores automatically. Existing installations can use the documented, verified offline migration, preserving the original data until acceptance.

• Installation recovery captures include all company stores, local attachments, audit history and identity material, with integrity checks before restoration.

• Controlled Cloud pilot deployments support automatic company creation, company-bound sign-in and independent suspension without stopping other companies.

• Automatic backups remain disabled by default for on-premise installations. Managed Cloud recovery is enabled separately and must pass an off-host restoration check before a company is marked ready.

• Federation remains inactive until explicitly enabled.

• Device sign-in codes reject noncanonical encodings of an issued reference.

• The server honors the configured Vault cache size, including smaller budgets for shared hosting.

• Delayed update checks are canceled and completed before the runtime closes its data stores, including interrupted catalog requests.

• Scheduled Product work runs within the admitted company and its active entitlements. First audit writes find the chain tail directly instead of rereading its history.

• Background job selection reads history without holding the Vault writer lock, keeping sign-in and other writes responsive; the selected job is rechecked atomically before claiming.

• The embedded region reference is compressed without changing its source data, license, catalogue or API responses. It is decoded once per process and keeps customer executables within the existing size ceiling.

Managed Cloud availability remains subject to pilot admission and the production verification of sign-in, recovery and service notification delivery.

The release includes Linux, macOS and Windows executables, signed Linux installers, and signed/notarized macOS installers. Windows MSI installers are not included in this release.

permalink ↗

Railbase now includes 21 guided tutorials in English, from first setup and sign-in to everyday work with Acme examples.

• Find lessons in a compact library with six topics, search and progress filters.
• See which lessons you have completed. Completion stays marked when you repeat or pause a lesson.
• Resume saved practice or restart a lesson whenever you need a reminder.
• Explore company structure, employee access, requests and approvals, Workflow Studio, Leonardo, documents, chat, meetings and connecting a phone.

This release provides signed and Apple-notarized macOS installers for Apple Silicon and Intel. Linux amd64/arm64 DEB and RPM packages and the Windows x64 MSI are now also available at v0.43.1. Linux packages are OpenPGP-signed; Windows retains the existing unsigned installer channel. The additional checksums-platforms-v0.43.1.txt covers these packages and the Linux/Windows updater binaries.

permalink ↗

Railbase v0.42.1 updates the macOS application and installer for Apple Silicon and Intel.

• Personal work follows its requested coordination route before reaching the named executor. Past-due work remains available to complete, and manager reminders link to the specific work record.
• Scanned PDFs can be found by their recognised text when native OCR is available. Search-text recovery preserves the original document and version.
• Manual document exchange retains transferred files, receipts and status history, with safer retry behaviour.
• Company country/region changes, identity integration URLs, role preset reconciliation and document retention have been corrected.
• Sign-in and MFA recovery preserve the required identity checks through cancel, retry and service interruptions.
• Authorized technical recovery restores blocked workflow participant resolution while preserving business decisions and company access boundaries.

Both macOS installers are signed with Developer ID, notarized by Apple and stapled for offline verification. Windows and Linux downloads remain explicitly on v0.41.2.

Translation requires an approved local provider. This release does not add an external translation service or publish the iOS application.

permalink ↗

🔒 Security release — update as soon as possible.

• Use theme tokens for policy status

permalink ↗

• Reset tenant data without downtime
• Sync company before Product installation
• Prove 1C financial statement parity
• Record Financial demo tenant identity
• Classify Financial reference accounts
• Align Financial reference model with governed roles

permalink ↗

• Align company catalog navigation

permalink ↗

• MacOS updates now complete automatically after a one-time system authorization; later updates install in the background without another password.
• Railbase now stops the previous process, restarts on the installed version, and returns the administrator to Update Center.
• Update Center now shows the actual “What’s new” after a successful restart and remembers when it has been read.
• Repeated update attempts no longer surface stale failure results.

permalink ↗

• Added clearer managed GRC detection explanations with reproducible calculation results.
• Aligned operator and company workspaces around role-based jobs and outcomes.
• Improved Industry Solution review flows, organization labels, and translated navigation.

permalink ↗

• Support sidebar plugin workspaces

permalink ↗

Streamline the Railbase admin for industrial operations

• Move Data, Companies, Access, Modules, Operations and Settings into the persistent global sidebar, with each area rendered as its submenu.
• Move the global tenant selector directly below the Railbase identity and use it as the single company context across organisation, collegial bodies and company policies.
• Consolidate Organisation and the former tenant catalogue into Tenants; keep tenant creation on the consolidated page and remove the duplicate catalogue surface.
• Make Data a read-only inspector and retire runtime schema, collection, import and record-mutation tooling from the customer admin.
• Remove the duplicate Plugin access screen and route plugin role assignment through the canonical Users & access RBAC surface.
• Keep system-admin invitations and lifecycle management as a governed Users & access screen instead of raw Data CRUD.
• Update documentation and regression coverage for the consolidated information architecture and read-only data contract.

Verification

• Exact-SHA local CI passed for commit 1e92ebd53b43fba0683db9532e6653404bc68f0f.
• Six platform binaries passed the release size gate.
• MacOS binaries and installers are Developer ID signed and Apple-notarized; Linux packages and repository metadata are OpenPGP-signed.
• Golden operator journeys and the full browser suite passed.

Windows artifacts are published without Authenticode signing; Microsoft SmartScreen may warn until the configured Windows signing credential is available.

permalink ↗

• The org-unit assertion was checking the nav link
• One Railbase per machine

permalink ↗

• Validate the version before it becomes a filename

permalink ↗

• I18n: translate the update-installer strings and regenerate the floor
• One click installs the update on a managed install (A3)
• The core downloads and verifies its own installer (A2)
• The Update Center now knows how this Railbase was installed
• 'Check for updates' in the tray
• The app never started its server — a relative data dir on a read-only volume

permalink ↗

• Stop shipping the server binary twice, and refuse in-place update inside the app bundle

permalink ↗

• Ship one x64 MSI — wixl has no native ARM64 target
• Cross-arch version check aborted the release on a PASSING result
• Native MSI installers with a tray supervisor, autostart and verifiable uninstall
• Native .deb/.rpm installers with a hardened systemd service
• Verifiable uninstall — audit mode, shared-data safety, drift guard
• Per-arch installers that deliver Railbase.app — menu-bar app, autostart, self-healing
• Licence renewal delivery — heartbeat-style vendor poll + admin refresh (FED-00 residual)
• Close FED-01..05 — replay store, policy surface, auto degrade/recover, repair execution, long-poll pull
• Align Core with managed Suite distribution

permalink ↗

• Align release journey with the customer CLI
• Make Suite installation the customer surface

permalink ↗