Changelog

Initial general availability. All three deployment tiers shipping in parallel: managed cloud, bring-your-own-cloud, and air-gapped self-hosted. This is the build we recommend for production enterprise rollouts.

• Tiers. Cloud (Cloudflare Containers + R2 + Neon), BYOC for AWS / AWS GovCloud / Azure / Azure Gov / GCP / GCP Assured Workloads / S3-compatible, and self-hosted Linux package with offline license activation.
• Roles wired end-to-end. Developer → Reviewer → Admin approval chain enforced at the backend, Manager role for billing and org transfer, every transition audited.
• Compile feature. Cloud-side macOS (x64 + arm64) and Windows (x64) compilation with signed artifact download. No Linux compile target for v1.
• Audit + Replay. Append-only Postgres audit with hash-chain export, 1 Hz Loro op capture, and the lightweight Rust replay editor for forensic walkthroughs.
• Time Machine. Three-day org-wide rewind, hot backups every hour for three days, standard backups for 90 days, project-level rollback.
• Stripe billing. Cloud-tier per-seat metering, prorated seat changes, 24-hour retry schedule on failures escalating to lockout, Customer Portal for self-service.
• SSO + 2FA. SAML and OIDC for Okta, Entra ID, Google Workspace, OneLogin, JumpCloud, plus generic. TOTP and WebAuthn second factors. IP allowlists, domain verification, configurable session timeout.
• License signing. Ed25519-signed self-hosted license keys verified on boot and hourly heartbeat. SHA-256 manifest verification for the bundled Code OSS and all extensions.

Closed beta. Distributed to a curated set of enterprise design partners under NDA. BYOC was limited to AWS only while we hardened the Velocity Stamp pattern across providers.

• Cloud and self-hosted deployment paths feature-complete; BYOC scoped to AWS.
• Approval chain, in-RAM storage container, and Loro real-time collab stable under team load.
• Stripe billing in test mode against the public pricing tiers; live keys held back until GA.
• SSO available for SAML only; OIDC providers landed in 1.0.0.
• First pass at the compliance scan packs — SOC 2 and HIPAA only.
• Admin panel feature-complete enough for our team to run beta org provisioning end-to-end.

Internal alpha. The Gelo demo org ran inside the cloud tier for our team and a small group of advisors. Most of the surface area existed but nothing was production-grade.

• Sessions, in-RAM container, and basic Code OSS embedding working on macOS only.
• Approval chain prototyped without the audit table backing it — every action logged to stdout.
• No billing surface; no SSO; no BYOC; no self-hosted packaging.
• Replay engine emitted op logs but had no editor UI yet.
• Windows desktop client booted but the Code OSS bundle wasn't signed.