The module that serves the workspace, the API and the edge. It is deployed on this machine and its release record is the one every deploy writes.

1. Version1.6.0

   Released 22 October 2026

   • The camera's own machine now runs an agent that answers for it: the protocol's canonical text and digest have one owner, so a proof the agent signs and a command the module signs are proved by the same rule in both languages.
   • The module now asks the camera host that holds the camera to make a recording, instead of pretending that a recording happened, and the host is told on its next turn.
   • The wallet's security gate now reads the database's real grants instead of believing them, and a missing grant closes the gate.
   • The committed model snapshot is now checked against the committed migrations, so a snapshot that has drifted is caught before it reaches a database.

2. Version1.5.1

   Released 22 October 2026

   • The assistant now shows the model exactly how to call a tool, so a call reaches the tool it names instead of failing on a label.

3. Version1.5.0

   Released 22 October 2026

   • Money can go back: a refund is a record of its own, an invoice and a credit note are real documents, and a tax that has not been configured issues no document at all.
   • The books can prove themselves: the reconciliation now reads the payment gateway's own settlement record, so a disagreement is found instead of counted.
   • A file can now be attached to a recording or to evidence, and it is kept only when the scan says it is clean.

4. Version1.4.0

   Released 22 October 2026

   • A person can now ask the server who they are: their own address, their own state and their own devices - and they can end one of their own devices.
   • Every module now answers the same health question in the same shape, and the persistence, the configuration and the diagnostics each have one owner instead of several copies.
   • The web client's shared parts - the way a call leaves, the session, and the states a screen shows - live in one package now, so two screens cannot disagree about what a refusal says.

5. Version1.3.0

   Released 22 October 2026

   • The routes now answer a refusal in the language the caller asked for, and the notification badge counts what the server says rather than what the browser counts.
   • A person can enrol their own device and an administrator can refuse it, and a refused device's sessions end at once.
   • The diagnostics now index every failure, keep their retention as configuration an operator can read, and refuse a write that would pass a declared budget.
   • Money can be collected in a sandbox - and only in a sandbox: the payment page asks for no card detail, the notification is signed, and a forged one is never written down.

6. Version1.2.1

   Released 22 October 2026

   • The landing on cam.pehromgroup.com is the surveillance product's own page again; the unlisted-share landing moves to the market module's own domain, market.pehromgroup.com.

7. Version1.0.0

   Released 21 October 2026

   • One premium component library now serves the web, Android and desktop apps: a shared shell, person menu, page header, fields, buttons, banners, state views and panels, with generated design tokens; the screens moved onto it and the duplicate interface code was deleted.
   • A refused sign-in on the web and Android now clears both fields, so the address can be corrected without retyping the password.
   • The wallet security gate is closed: the ledger is append-only, every journal entry is linked, the 13-test security matrix passes, and the module and core suites pass with the database isolation bracket unchanged.
   • Uploads can be cancelled, recover after a crash, sweep abandoned staging files without starving a live upload, and reserve storage quota one writer at a time.

The workspace itself, served as static files. Nothing to install, and it is updated when the module is.

1. Version1.6.0

   Released 22 October 2026

   • The camera's own machine now runs an agent that answers for it: the protocol's canonical text and digest have one owner, so a proof the agent signs and a command the module signs are proved by the same rule in both languages.
   • The module now asks the camera host that holds the camera to make a recording, instead of pretending that a recording happened, and the host is told on its next turn.
   • The wallet's security gate now reads the database's real grants instead of believing them, and a missing grant closes the gate.
   • The committed model snapshot is now checked against the committed migrations, so a snapshot that has drifted is caught before it reaches a database.

2. Version1.5.1

   Released 22 October 2026

   • The assistant now shows the model exactly how to call a tool, so a call reaches the tool it names instead of failing on a label.

3. Version1.5.0

   Released 22 October 2026

   • Money can go back: a refund is a record of its own, an invoice and a credit note are real documents, and a tax that has not been configured issues no document at all.
   • The books can prove themselves: the reconciliation now reads the payment gateway's own settlement record, so a disagreement is found instead of counted.
   • A file can now be attached to a recording or to evidence, and it is kept only when the scan says it is clean.

4. Version1.4.0

   Released 22 October 2026

   • A person can now ask the server who they are: their own address, their own state and their own devices - and they can end one of their own devices.
   • Every module now answers the same health question in the same shape, and the persistence, the configuration and the diagnostics each have one owner instead of several copies.
   • The web client's shared parts - the way a call leaves, the session, and the states a screen shows - live in one package now, so two screens cannot disagree about what a refusal says.

5. Version1.3.0

   Released 22 October 2026

   • The routes now answer a refusal in the language the caller asked for, and the notification badge counts what the server says rather than what the browser counts.
   • A person can enrol their own device and an administrator can refuse it, and a refused device's sessions end at once.
   • The diagnostics now index every failure, keep their retention as configuration an operator can read, and refuse a write that would pass a declared budget.
   • Money can be collected in a sandbox - and only in a sandbox: the payment page asks for no card detail, the notification is signed, and a forged one is never written down.

6. Version1.2.1

   Released 22 October 2026

   • The landing on cam.pehromgroup.com is the surveillance product's own page again; the unlisted-share landing moves to the market module's own domain, market.pehromgroup.com.

7. Version1.0.0

   Released 21 October 2026

   • One premium component library now serves the web, Android and desktop apps: a shared shell, person menu, page header, fields, buttons, banners, state views and panels, with generated design tokens; the screens moved onto it and the duplicate interface code was deleted.
   • A refused sign-in on the web and Android now clears both fields, so the address can be corrected without retyping the password.
   • The wallet security gate is closed: the ledger is append-only, every journal entry is linked, the 13-test security matrix passes, and the module and core suites pass with the database isolation bracket unchanged.
   • Uploads can be cancelled, recover after a crash, sweep abandoned staging files without starving a live upload, and reserve storage quota one writer at a time.

A native app for Android phones and tablets, built after the web workspace is finished. No build is published yet and no store page exists for it.

A native desktop app for Windows, next in the order the platforms are built. No build is published yet.