What changed.

Dated, newest first, in sentences a person understands. Only what you can see or use; nothing internal.

9 September 2026

The site is redesigned around the product's real screens, and works on a phone throughout.
The receipt is folded into the signed merge. A goal's Merge tab shows what landed, on what evidence, who decided, and the signature; the ledger says merge; the record lives at /landing/N/record.
Single sign-on through OpenID Connect, and SAML 2.0 single sign-on, one issuer per space. A space can require its issuer, and the doors are proven end to end in CI.
SCIM provisioning: your identity provider adds and removes people.
The database is encrypted at rest.
A retention cap per space for CI artifacts. Merge records and the audit log are never subject to it.
The security posture at /security, with the controls map behind it.
Account export and self-serve closure. A space exports as one file, and the export walks the whole audit log.
The self-host package: the same Terraform stack, installed from published images in your own AWS account.
The platform sends as noreply@sigbound.com; hello@sigbound.com receives, and is read by a person.
A Sign in link in the footer.

The public site lives at the apex, beside the app.
Accounts are by invitation, with a request door on every page.
An attempt is a branch's lineage. Pushes on one branch fold into one attempt, named goal.attempt: 7.1, not four pull requests.
The goal page is one sentence and what done means; the rest folds away until you need it.
Repository and space Insights are redesigned as the gate's pulse: what went through it, and what it cost.
Account and space settings are in plain words.
The audit log reads as sentences: what happened, who, about what, when.
Sign-in doors draw only the methods a deployment actually has.