Changelog

Railbase v0.42.1 updates the macOS application and installer for Apple Silicon and Intel.

• Personal work follows its requested coordination route before reaching the named executor. Past-due work remains available to complete, and manager reminders link to the specific work record.
• Scanned PDFs can be found by their recognised text when native OCR is available. Search-text recovery preserves the original document and version.
• Manual document exchange retains transferred files, receipts and status history, with safer retry behaviour.
• Company country/region changes, identity integration URLs, role preset reconciliation and document retention have been corrected.
• Sign-in and MFA recovery preserve the required identity checks through cancel, retry and service interruptions.
• Authorized technical recovery restores blocked workflow participant resolution while preserving business decisions and company access boundaries.

Both macOS installers are signed with Developer ID, notarized by Apple and stapled for offline verification. Windows and Linux downloads remain explicitly on v0.41.2.

Translation requires an approved local provider. This release does not add an external translation service or publish the iOS application.

permalink ↗

🔒 Security release — update as soon as possible.

• Use theme tokens for policy status

permalink ↗

• Reset tenant data without downtime
• Sync company before Product installation
• Prove 1C financial statement parity
• Record Financial demo tenant identity
• Classify Financial reference accounts
• Align Financial reference model with governed roles

permalink ↗

• Align company catalog navigation

permalink ↗

• MacOS updates now complete automatically after a one-time system authorization; later updates install in the background without another password.
• Railbase now stops the previous process, restarts on the installed version, and returns the administrator to Update Center.
• Update Center now shows the actual “What’s new” after a successful restart and remembers when it has been read.
• Repeated update attempts no longer surface stale failure results.

permalink ↗

• Added clearer managed GRC detection explanations with reproducible calculation results.
• Aligned operator and company workspaces around role-based jobs and outcomes.
• Improved Industry Solution review flows, organization labels, and translated navigation.

permalink ↗

• Support sidebar plugin workspaces

permalink ↗

Streamline the Railbase admin for industrial operations

• Move Data, Companies, Access, Modules, Operations and Settings into the persistent global sidebar, with each area rendered as its submenu.
• Move the global tenant selector directly below the Railbase identity and use it as the single company context across organisation, collegial bodies and company policies.
• Consolidate Organisation and the former tenant catalogue into Tenants; keep tenant creation on the consolidated page and remove the duplicate catalogue surface.
• Make Data a read-only inspector and retire runtime schema, collection, import and record-mutation tooling from the customer admin.
• Remove the duplicate Plugin access screen and route plugin role assignment through the canonical Users & access RBAC surface.
• Keep system-admin invitations and lifecycle management as a governed Users & access screen instead of raw Data CRUD.
• Update documentation and regression coverage for the consolidated information architecture and read-only data contract.

Verification

• Exact-SHA local CI passed for commit 1e92ebd53b43fba0683db9532e6653404bc68f0f.
• Six platform binaries passed the release size gate.
• MacOS binaries and installers are Developer ID signed and Apple-notarized; Linux packages and repository metadata are OpenPGP-signed.
• Golden operator journeys and the full browser suite passed.

Windows artifacts are published without Authenticode signing; Microsoft SmartScreen may warn until the configured Windows signing credential is available.

permalink ↗

• The org-unit assertion was checking the nav link
• One Railbase per machine

permalink ↗

• Validate the version before it becomes a filename

permalink ↗

• I18n: translate the update-installer strings and regenerate the floor
• One click installs the update on a managed install (A3)
• The core downloads and verifies its own installer (A2)
• The Update Center now knows how this Railbase was installed
• 'Check for updates' in the tray
• The app never started its server — a relative data dir on a read-only volume

permalink ↗

• Stop shipping the server binary twice, and refuse in-place update inside the app bundle

permalink ↗

• Ship one x64 MSI — wixl has no native ARM64 target
• Cross-arch version check aborted the release on a PASSING result
• Native MSI installers with a tray supervisor, autostart and verifiable uninstall
• Native .deb/.rpm installers with a hardened systemd service
• Verifiable uninstall — audit mode, shared-data safety, drift guard
• Per-arch installers that deliver Railbase.app — menu-bar app, autostart, self-healing
• Licence renewal delivery — heartbeat-style vendor poll + admin refresh (FED-00 residual)
• Close FED-01..05 — replay store, policy surface, auto degrade/recover, repair execution, long-poll pull
• Align Core with managed Suite distribution

permalink ↗

• Align release journey with the customer CLI
• Make Suite installation the customer surface

permalink ↗

• Support role-scoped plugin workspaces

permalink ↗

• Install Product-entitled component sets
• Gl migrated-chart statement classification e2e (regression)
• Ap void → gl reversal e2e under an explicit source_id (regression)

permalink ↗

• Resolve e.auth.role for plugin verbs via tenant-scoped RBAC assignments
• Ops: serialize core releases across sessions

permalink ↗

• Follow current admin UI routes
• Add associative plugin visualization interactions
• Use local exact-SHA release gate
• Start job workers after plugin runtime load
• Fix plugin UI tenant entitlement resolution

permalink ↗