PDF export stabilized: Download now works reliably without navigating away from the app.
Memory handling improved: Temporary blob URLs are properly released.
Download flow simplified: No unnecessary confirmation dialogs.
v1.7.4 – Export clarity & context
Export clarity improved: ZIP exports now include a README file explaining the structure.
Iterations are more clearly represented with additional context information.
Proof presence per iteration is clearly visible.
v1.7.3 – Duty ZIP export
Duty ZIP export added: Users can download any duty including all iterations and proofs as a ZIP file.
Full documentation chain exportable: The ZIP contains all iterations in chronological order with associated proof files.
Overview file included in export: overview.json documents chain length, metadata and the order of all iterations.
v1.7.2 – Account data export (ZIP)
Account data export (ZIP) added: Users can download their entire account including duties, proofs and exports.
Full data access before deletion enabled: The export is available directly in the account section.
Structured export for local archiving provided: Duties, proofs and exports are included as an organised directory structure in the ZIP.
v1.7.1 – GDPR-compliant account deletion
GDPR-compliant account deletion added: Users can now permanently and irreversibly delete their account and all associated data.
Deletion flow made clear and transparent: Two confirmation steps ensure that deletion is a deliberate action.
Full removal of all user data enabled: Duties, proofs, exports and uploaded files are completely removed.
v1.7.0 – Public product layer: SEO, GEO and language parity
Structured GEO definitions added: Core descriptions on main and topic pages have been formulated to be machine-readable for AI systems and search engines.
Hreflang x-default added to all public pages: All public HTML pages now include the x-default alternate link for international SEO.
English content brought to DE parity: Positioning, definitions, and links in the English version now match the German version.
Pricing page metadata updated: Title and description reflect the current Free/Pro status.
v1.6.8 – Compatibility with stricter browser security policies restored
Compatibility with stricter browser security policies restored: Pages are now fully initialized even under strict content security policies.
Initialization of public and protected pages unified: Page load logic has been consolidated and is now more maintainable.
Language selection, navigation and sign-in flows further stabilized: Affected elements are now reliably loaded.
v1.6.7 – Security and privacy hardening completed
Security and privacy hardening further completed: Internal security and privacy points have been fully cleaned up and closed.
Reporting and configuration details cleaned up: Internal reporting mechanisms have been made more data-sparse.
Security audit completed: All identified security points have been assessed, resolved, or consciously accepted.
v1.6.6 – Session and authentication behaviour further hardened
Session and authentication behaviour further hardened: Expired sessions are now reliably detected and no longer used for requests.
Handling of expired sessions improved: Stale credentials are automatically cleaned up on the next access.
Client/server consistency further strengthened: The client state now more reliably reflects the server state.
v1.6.5 – Export consistency further improved
Export consistency further improved: Internal export references are now consistently aligned throughout.
Internal export references unified: Repeated requests for the same export now return identical references.
Unused export fields cleaned up: Fields without a valid data source have been removed from the export.
v1.6.4 – Content Security Policy enforced
Content Security Policy enforced: The security policy switches from Report-Only to Enforce. Unauthorized script and resource sources are now actively blocked.
External script sources fully removed: Permitted script sources are now restricted exclusively to the app's own server.
v1.6.3 – Client-side dependencies further localized
Client-side dependencies further localized: External script dependencies in the app core have been further reduced. The app core no longer loads runtime scripts from external CDN sources.
Frontend security baseline further hardened: All essential client-side dependencies are now served locally.
PDF export dependency localized: The library used for PDF export is now served locally instead of being loaded from an external CDN.
Export integrity further hardened: Saved export manifests can no longer be modified after creation.
Protected page behaviour aligned: Session expiry and sign-out handling is now consistent across all protected app pages.
v1.6.1 – Export accuracy & privacy
Export accuracy improved: Active duties without a proof are no longer incorrectly flagged as incomplete in exports.
Privacy policy updated: Cloudflare documented as CDN and DDoS protection provider in the privacy policy (DE/EN).
v1.6.0 – Persisted export manifests, manifest rendering and integrity block
Export manifest baseline introduced: Exports now rely on a persisted snapshot instead of scattered live reads.
Integrity anchor added: Manifests are canonically serialized, hashed with SHA-256 and persisted with a stable hash reference.
Integrity block visible in PDF: Export ID, timestamps, status, iterations, proof counts and compact notes are documented early in the export.
Export status more reliable: Incorrect PARTIAL flags for temporarily unreachable proofs are reduced.
Login emails improved: Logos and dark-mode variant are now reliably shown across mail clients.
v1.5.3 – Auth hardening, recovery protection and dark-mode consistency
Login completion comprehensively hardened: Login links are now bound to the original request context and accepted only in a valid context.
Recovery protection increased: Recovery codes are now strictly fallback-only, verified server-side, and limited after repeated invalid attempts.
URL safety refined: Recovery codes are no longer transported in login-link URLs.
Callback guidance improved: Recovery and error flows now guide users clearly, including a direct action to request a new login link.
Theme consistency expanded across DE/EN: Login emails and callback now follow the selected light/dark mode consistently, including dark branding in email footer.
v1.5.2 – Logout clarity and landing navigation
Logout also hardened for browser back: After sign-out, protected app pages are no longer shown again from the browser cache.
Return to the public landing page: After logout, PflichtPilot now directs users back to the public landing page.
Home link refined in app context: The footer Home link now opens the public landing page from inside the app instead of jumping back into the overview.
v1.5.1 – Auth integrity, history, export clarity and EN consistency
DE/EN auth flow hardened: Request, completion and language routing now behave consistently across both language variants.
Link protection refined: Reused or tampered login links are rejected consistently.
Archive integrity refined: Recurring duties now avoid partial states between archiving and next iteration creation.
Proof truth aligned: Existing proof status now consistently reflects file-backed proof entries only.
Chain signals clarified: Incomplete earlier iterations are now shown explicitly in duty detail and history.
History made chronological: Earlier iterations are displayed in a clear time-based order.
Export status made more honest: Unknown proof completeness no longer appears as an exact ratio.
Export made more robust: Documentation chains with three or more iterations are processed reliably.
EN document titles corrected: English app pages now set consistent document titles again.
v1.5.0 – EN coverage, auth hardening and performance
English coverage expanded: Public EN counterparts for key content and legal pages were completed.
DE/EN consistency improved: Navigation, linking and page titles were aligned across both languages.
Login flow stabilized: Request, callback and guard paths now run consistently with clear failure states.
Token protection hardened: Login tokens are removed from callback URLs after processing and no longer logged as sensitive query strings.
Local auth state hardened: Invalid or stale local states are consistently treated as signed out.
Performance improved: Overview, duty detail and export now load proof/chain data with fewer roundtrips.
Wait time made transparent: When requests are temporarily limited, the login page shows the remaining wait time as a countdown.
v1.4.11 – Stability improvements
Internal stability and maintenance improvements.
v1.4.10 – Proof title and consistency
Export >50 clarified: For very long histories, the current subset is applied clearly.
Proof titles unified: Titles stay consistent across detail view and export.
Entry behavior stabilized: App and billing start pages now load more reliably.
Callback wording refined: Public release wording was made clearer.
v1.4.9 – Proof/export integrity and residual fixes
Detail view >50 clarified: Shortened lists are clearly marked as partial views.
Export >50 marked: For shortened evidence files, the covered scope is shown clearly.
Upload risk reduced: When save fails, uploaded files are cleaned up immediately.
Detail robustness improved: Documentation-chain conflicts are shown clearly.
v1.4.8 – Auth and security hardening
Login completion hardened: Callback processing of link data is more stable.
Archive flow unblocked: Individual read errors no longer pre-block archiving.
v1.4.7 – Archiving reliability
Archiving more reliable: Results are returned clearly and consistently.
Reactivation refined: Reactivation runs separately with clear conflict checks.
v1.4.6 – Chain clarity and status truth
Chain conflicts safeguarded: Ambiguous follow-up iterations are handled as explicit conflicts.
Status display refined: Pro success page confirms activation only with proven profile status.
Proof flow hardened: Uploads to archived duties are consistently blocked.
v1.4.5 – Visibility, content and export clarity
Public discoverability improved: Relevant page signals were aligned consistently.
Public consistency: DE/EN landing links and target paths were unified.
Content tightened: Core knowledge pages and internal links in DE/EN were clarified.
Evidence presentation improved: Export and chain communication became clearer.
v1.4.4 – Knowledge hub and SEO linkage
Core stabilized: Archive flow and documentation chains became more robust.
Knowledge hub established: How-it-works, FAQ, glossary and knowledge pages in DE/EN were linked.
Public baseline set: DE/EN structure and page mapping were aligned.
v1.4.3 – Auth callback and UX polish
Login and user guidance were stabilized for common everyday flows.
v1.4.2 – Stability and clarity
Archiving and recurrence behavior became more reliable with clearer errors.
v1.4.1 – Consolidation
Terminology and DE/EN landing consistency were consolidated.
v1.4.0 – Continuity
Recurrence stabilized: Monthly/yearly intervals became reliable.
Archive as trigger: Follow-up duties are created only when archiving.
History clarified: Archive state and progression became easier to track.
v1.3.6 – Legal
Legal notices (terms, privacy, imprint) were added and refined.
v1.3.5 – Security audit
Security-related hardening was implemented.
v1.3.4 – Bug fixes
Smaller fixes for date, footer, and interaction flows.
v1.3.3 – Privacy update
Privacy notices were updated and delivery improved.
v1.3.2 – Maintenance
Maintenance release with smaller stability improvements.
v1.3.1 – UI and PDF
Smaller UI fixes and PDF export stabilization.
v1.3.0 – PDF export
PDF export introduced: Duties and proofs can be exported as structured evidence file.
v1.2.1 – Paywall flow
Small fixes in Pro/paywall flow and plan display.
v1.2.0 – Overview and Pro flow
Overview expanded: Search, status and archive view were introduced.
Proof and Pro flow: Proof management and Pro/Free flow were extended.
v1.1.0 – Multiple proofs
Multiple proofs per duty and basic proof types were introduced.
v1.0.0 – MVP
Web MVP: Duty creation, due dates and magic-link login were published as initial version.