Changelog

The Arbitex admin portal now ships with a full theme catalog — preference themes (Ocean, Lavender, Midnight Blue, Rose Gold, Earth Tones, Warm Neutral, Monochrome), seasonal themes for spring, summer, autumn, and winter, a WCAG AAA high-contrast accessibility theme, and seasonal holiday themes. Every theme includes complete light and dark mode variants. Themes activate instantly from display preferences without a page reload.

All webhook payloads now carry cryptographic signatures. Receivers can verify authenticity before processing — the signature header and verification procedure are documented in the webhook integration guide. Retry delivery now uses exponential backoff with a configurable retry window. Failed deliveries surface in the admin dashboard with full payload inspection for troubleshooting.

Hybrid Outpost deployments can now pin a custom certificate bundle for outbound TLS verification. Organizations that operate internal certificate authorities or air-gapped PKI environments can supply their CA chain at deployment time. The certificate store is validated at startup and on each policy sync — misconfigured bundles surface as health check failures before traffic is served.

A downloadable compliance summary is now available for financial services organizations evaluating Arbitex against GLBA, SOX, and SEC Reg FD requirements. The package covers the AI model boundary enforcement architecture, audit log tamper-evidence properties, SIEM integration for financial institutions, and the data residency model for Hybrid Outpost deployments. Available on request from your account team.

Platform documentation now includes end-to-end guides for the most common deployment and integration patterns: certificate bundle configuration, SIEM connector setup for Splunk, Sentinel, and Elastic, policy bundle lifecycle management, and Hybrid Outpost upgrade procedures. Each guide includes configuration examples and a validation checklist.

Hybrid Outpost nodes now include a circuit breaker that monitors upstream AI provider health in real time. When a provider's error rate or latency exceeds configured thresholds, the circuit opens and traffic is rerouted automatically — to a fallback provider or a queue, depending on policy. The circuit resets on a configurable recovery window. No manual intervention required; state and transitions are visible in the health dashboard.

The Arbitex Cloud admin portal now supports a dark display theme. The theme activates automatically when a user's operating system preference is set to dark mode, and can also be toggled manually from display preferences. All dashboard views, audit log tables, and policy management screens are fully supported in both themes.

DLP policy rules can now include anonymous IP detection — flagging requests that originate from known VPN exit nodes, open proxy services, and Tor exit relays. Detection runs at the gateway layer before any model call is made. Policy can route, flag, require additional authentication, or block based on the anonymization signal. Useful for organizations with geographic access controls or insider risk policies.

DLP detection rules can now be managed entirely through a visual editor in the admin portal. Create, edit, and test rules without writing JSON or YAML. The editor supports regex patterns, entity type selection, severity tiers, and enforcement action assignment. Rules can be validated against sample data before deployment. Changes are version-logged and sync to Outpost nodes on the next policy bundle push.

New competitive analysis cards are now available in the admin documentation for healthcare, financial services, government, and insurance verticals. Each card maps Arbitex Gateway capabilities against commonly evaluated alternatives by industry — covering compliance bundle coverage, hybrid deployment fit, and audit log requirements specific to each regulated sector. Available in the compliance documentation package.

Administrators can now require multi-factor authentication before users access any AI gateway endpoint. MFA enforcement is configurable per group, team, or organization-wide. Sessions that don't satisfy the MFA requirement receive a 401 with a clear re-authentication prompt. TOTP and WebAuthn/FIDO2 authenticators are supported.

The admin portal adds three new areas: a notification center for policy alerts, budget threshold events, and SIEM delivery failures; a settings hub for organization-wide configuration including MFA policy, session timeouts, and webhook endpoints; and a gateway health dashboard showing real-time DLP pipeline status, provider availability, and audit log write latency.

Hybrid Outpost nodes can now export structured OpenTelemetry metrics directly to external collectors — Prometheus, Grafana, Datadog, or any OTLP-compatible backend. Spans cover request latency, DLP pipeline stage timing, policy evaluation duration, and provider response times. Correlate AI governance events with your existing application observability stack without routing telemetry through the Arbitex cloud plane.

The Arbitex admin portal now ships with a WCAG AAA compliant high-contrast theme. The theme activates automatically when a user's operating system or browser has high-contrast mode enabled. Color contrast ratios exceed the 7:1 requirement across all interactive elements. The theme is also manually selectable from display preferences.

New integration guides are available covering end-to-end configuration for the most common deployment patterns: OpenAI base_url redirect, Anthropic routing, Azure OpenAI tenant integration, Okta SAML + SCIM setup, Splunk HEC SIEM sink, and Grafana + OpenTelemetry dashboards. Each guide includes a working configuration example and a validation checklist.