Changelog

All notable changes to NeutralAI Gateway will be documented in this file.

The format is based on Keep a Changelog, and this project follows semantic versioning for public release notes.

[Unreleased]

#1487: added the developer tier (£9/mo, shield-only API/SDK access, bring-your-own-LLM, 500K masking requests/mo hard cap) to the public pricing catalog, positioned between Free and Starter. New versioned facts files ship this change without editing prior published versions: documents/business/packaging/pricing_tier_entitlements_2026q2.json (operational entitlements) and documents/business/packaging/shared_facts_pricing_2026q3.json (marketing-visible copy). The public pricing catalog contract, its exact-match validator, and the frontend /pricing page all now expect six ordered tiers (free, developer, starter, team, business, enterprise) with a new get_developer self-serve CTA action.
AUDIT-100 G6: documents/business/packaging/shared_facts_pricing_2026q2.json is the single source of truth for marketing-visible pricing facts (plan name, monthly/annual GBP prices, summary copy, seat terms, feature list, CTA label) shared between the gateway frontend and the marketing website. The public pricing catalog endpoint (/v1/billing/public-pricing-catalog) now surfaces this file under marketing_facts. Field naming follows the existing public-pricing-catalog contract (annual_monthly_equivalent_gbp / annual_billed_upfront_gbp).
scripts/ci/check_entitlement_versioning.py now enforces versioning on both pricing_tier_entitlements_*.json and shared_facts_pricing_*.json file families.

Added a public changelog page in the web app so customers can review dated product updates without signing in.
Added dashboard release highlights that surface the latest three changelog entries directly in Secure Chat.

Standardized release note categories around Added, Changed, Fixed, Security, and Deprecated for easier enterprise review.

Fixed discoverability gaps by linking changelog access from the dashboard footer and the user help menu.

Clarified customer-visible release communication without exposing internal-only deployment or incident detail.

Added first-run onboarding and setup guidance for new workspaces entering Secure Chat.
Added clearer account activation cues for extension rollout and provider configuration readiness.

Tightened the member onboarding path so users reach a usable protected chat flow faster.

Fixed several onboarding state transitions that could leave checklist progress out of sync after session changes.

Added tenant-scoped SSO domain verification workflow and verification status tracking.
Added admin UI support for claiming and checking SSO domains before enabling enterprise sign-in.

Changed SSO admission policy so only verified claimed domains can complete the sign-in path.

Hardened enterprise sign-in by enforcing verified ownership before SSO callbacks complete.

Added Redis-backed JWT revocation checks to tighten session invalidation behavior.
Added support-safe product email observability endpoints for delivery and suppression review.

Changed session revocation handling to use shared revocation state instead of relying only on client-side logout.

Fixed several session-expiry paths so expired users are redirected more consistently into the sign-in flow.

Added self-serve billing foundations, entitlement-aware user journeys, and pricing-tier gating across the product.
Added broader operational evidence, support, and deployment artifacts for enterprise readiness.

Changed the product baseline from early preview workflows to a more structured enterprise-ready control plane.

Fixed multiple dashboard and billing edge cases discovered during launch-readiness hardening.

Deprecated legacy compatibility paths that do not match the current public versioning and rollout model.