Product changelog

Route a configurable percentage of live traffic to a challenger ruleset without touching your gateway. Both variants write to the decision warehouse for side-by-side KPI comparison. Challenger must be in `approved` state; promotion to champion follows the standard governance workflow.

The portable decision bundle carries a SHA-256 content_hash over the canonical resolved definition. The edge binary re-verifies the hash before binding the listener — an orchestrator sees a failed deploy, not a pod silently serving the wrong ruleset. Cryptographic signing (Ed25519/sigstore) remains a distribution-layer residual, not product Live.

The Decision Server batch endpoint now accepts an `idempotency_key` per record. Duplicate submissions return the stored response rather than executing again — safe re-entry for month-end batch jobs, overnight portfolio ratings, and crash-retry workflows.

Each environment now maintains blue and green deployment slots. A promotion atomically shifts the live label with in-flight request draining — no mid-request version change. The old slot stands by for 10 minutes (configurable) for instant rollback.

Configure an ordered chain of AI endpoints: Anthropic, OpenAI, Gemini, Bedrock-compatible, or any OpenAI-compatible self-hosted model. On rate-limit or 5xx, the engine falls through transparently. Content-hash cache ensures re-runs are genuinely re-runs.

Warehouse persistence now uses a dedicated in-process ring buffer drained by a separate writer pool. Hot path latency is unaffected; writer health (lag, queue depth) is exposed on GET /api/health/engine and in OpenMetrics format.

The wasm32 engine build is now 1.5 MB verified. Cold start to first decision is approximately 20 ms from a debug build. The dependency tree is six crates — each additional dependency is a reviewed addition, not an automatic transitive inclusion.

The execution pool now sheds load at high-water mark with HTTP 503 SERVICE_BUSY and Retry-After headers — rather than queueing without limit. The liveness probe runs on isolated async workers so a saturated pool cannot trigger a pod kill.

Decision Manager Studio now provides vocabulary-aware BAL 1.0 IntelliSense, inline test-case execution against the local Decision Server, and Git-friendly plain JSON project serialisation. Pull, edit, push without leaving the IDE.

The Manager console now runs structural analysis on published and draft decision tables: overlapping condition rows, unreachable rules, and condition gaps are highlighted before publish. The same checks an ODM DVS author expects, on the same artifact.

Separation of duties is now enforced at the platform layer. Audit Observers have read-only access to decision logs and governance trails without the ability to modify rulesets. RBAC is workspace-scoped and SSO/OIDC compatible.

Upload an IBM ODM export (.zip) in the browser for a local inventory: action rules, decision tables, ruleflows, and related artefacts counted and categorised. Nothing is uploaded. AI-assisted BAL 1.0 translation requires human review before publish.