Changelog

Full governance configuration export, import, and point-in-time rollback. Enterprise change management teams can version complete policy state — compliance bundles, DLP rules, routing policies, and identity configurations — and restore any previous configuration snapshot on demand.

Pre-built Grafana dashboard definitions for request volume, latency percentiles, DLP trigger rates, cost by provider, and model health metrics. Import directly into existing Grafana deployments alongside the Prometheus /metrics endpoint for pull-based operational monitoring.

Webhook event delivery now includes configurable retry policies with exponential backoff and a dead-letter queue for failed deliveries. Failed webhook payloads are preserved for manual replay. Delivery status tracking is available in the admin portal.

Anonymous IP detection identifies requests originating from known proxy services, VPN exit nodes, Tor relays, and hosting providers. GeoIP enrichment adds country, region, and ASN metadata to every AI request for geographic policy enforcement and audit reporting.

Expanded documentation for the policy engine covering combining algorithms, condition types, group filters, and compliance bundle configuration. Includes worked examples for HIPAA minimum necessary enforcement, GLBA NPI detection, and multi-provider routing policies.

Arbitex Gateway now exports structured telemetry via OpenTelemetry Protocol (OTLP). Every request produces a trace with model, provider, latency, token counts, policy decisions, and DLP findings. Export to any OTLP-compatible backend over gRPC or HTTP. Pre-built Grafana dashboard definitions are available for request volume, latency, DLP triggers, and cost by provider.

The OAuth authorization flow now supports Proof Key for Code Exchange (PKCE) per RFC 7636. Public clients — browser-based applications, mobile apps, and CLI tools — can complete the authorization code flow without a client secret. PKCE is enforced automatically for public client registrations.

The admin portal has been updated to meet WCAG 2.1 AA accessibility standards across all pages. Updates include skip-to-content navigation for keyboard users, ARIA roles and labels on modals and tables, aria-current indicators on active navigation items, accessible form labeling throughout audit log and DLP rule management, and focus management on modal open and close.

Hybrid Outpost deployments now include a bundled GeoIP database for geographic access control enforcement. Restrict AI model access to requests originating from approved regions or block traffic from high-risk jurisdictions — all evaluated locally at the data plane without external lookups.

Hybrid Outpost nodes now expose a local Prometheus-compatible metrics endpoint. Operators can scrape request volume, latency percentiles, policy decision rates, and DLP trigger counts directly from the data plane — no cloud connectivity required. Pairs with the bundled Grafana dashboard definitions for air-gapped monitoring.

API reference documentation is now complete across all endpoint groups. The final batch covers outpost management, metrics export configuration, GeoIP policy endpoints, and PKCE client registration. All endpoints include request and response schemas, error codes, and authentication requirements.

New dedicated page covering Arbitex Gateway for energy and utilities operators. Content covers NERC CIP compliance for Bulk Electric System assets, SCADA/ICS data protection at the OT/IT boundary, smart grid telemetry DLP, nuclear regulatory compliance under 10 CFR 73.54, and TSA Pipeline Security alignment. Air-gap Outpost deployment for isolated OT networks is documented.

Administrators can now configure passkey enrollment and authentication policy at the organization level. Policy options include requiring passkey enrollment within N days, blocking password-only logins for designated user groups, and setting passkey validity windows. Policy changes are reflected immediately and logged in the audit trail.

The admin portal now supports full configuration export and import for policy bundles, routing rules, and access control settings. Exported configuration snapshots are signed and versioned. Operators can restore a previous configuration state from the portal or via the configuration management API. Restore operations generate a full audit record.

Site-wide performance improvements: below-fold images now use native lazy loading and async decoding, reducing initial page load resource contention. Width and height attributes have been added to all diagram images to eliminate cumulative layout shift. Critical CSS assets are preloaded in the document head.