Changelog

1. v0.2.0 September 30, 2026 · Wave 1 · verified on synthetic data

   Added

   • Sign-in hardening: forced first-login change, one-time temporary passwords, TOTP MFA with recovery codes, lockout with alert, idle and manual lock, session list and revoke.
   • Administration console: create, disable and enable users, reset password or MFA, unlock, role change with two-person approval for privileged roles, facilities, units, locations, MRN prefix and care teams.
   • Registration: check-digit MRNs, live duplicate warning, unknown-patient registration, edit history, visits, two-person virtual merge and unmerge, masked national IDs with audited reveal, wristband preview, data-quality tab.
   • Coded lists: problems (ICD-10-CM subset), allergies, medications (RxNorm subset), immunizations (CVX), history, type-ahead, and medication reconciliation that must decide every active medication.
   • Audit v2: per-clinic hash chain with verify button, filters, read events, per-patient access report.
   • VIP and restricted flags, break-glass with review queue, disclosure log.
   • AuroraMed Packaging: 13-module capability catalog, manifest editor, live validation with locked safety floors, signed packages, web bundle and portable app builds, two-operator publishing.
   • Four synthetic tenants on one hub; Small Clinic and Hospital presets.

   Changed

   • Hub code reorganised into separate route modules; additive-only migrations.
   • Static pages now carry security headers and a content security policy (security finding F1, fixed).
   • Several interface bugs found by viewing screenshots were fixed (for example placeholder text showing “null”).

   Known limits

   • Cloud-only: a network outage stops alerts and messaging. No offline chart.
   • No real integrations. Results enter through a simulated internal interface.
   • Open security findings F2, F3, F4, F8, F11 and F12 (see the whitepaper).
   • Buttons are 36 px, below the 48 px design target. Builds are unsigned and have no auto-update.

2. v0.1.1 September 29 to 30, 2026 · Baseline pilot

   Added

   • Facility messaging with receipts, Memo Desk, code alerts with escalation and two-person cancel, live patient charts, code catalog with dual control, username and password sign-in.
   • Two synthetic tenants and a small set of synthetic users.

3. v0.3.0 Not released · Wave 2 · rolling out

   Planned

   • Clinical notes with signing, structured orders, lab and imaging simulators, forms and a fuller permission matrix. This entry will be replaced with real notes when a verified release exists. Nothing here is available.

Dates are Pacific Time. Test results for v0.2.0 are on the status page and are the developer’s own.