Changelog

Visible technical activity, most recent first. Only externally meaningful milestones are listed here — the full commit history lives on the private repo.

• 2026-04-17

  Public site launch and dashboard protection

  Public site split off from the dashboard into its own Astro package and its own Vercel project. Dashboard moved to dashboard.tessaliq.com, protected by Basic Auth on both preview and production. ENISA position paper submitted to the EUDIW Cybersecurity Certification Scheme consultation.

• 2026-04-16

  Full OIDF matrix cleared

  Three new OpenID Foundation conformance plans published and passed with zero warnings: SD-JWT-VC HAIP, mdoc standard, and mdoc HAIP. Combined with the April 10 SD-JWT-VC standard run, this closes the 2×2 matrix (SD-JWT-VC + mdoc × standard + HAIP) at 24/24 modules.

• 2026-04-15

  First HAIP runs, three real bugs fixed

  First conformance attempts in the HAIP 1.0 Final variants surfaced a routing bug in the OIDF driver script, a missing org.iso.18013.5.1.mDL policy for the mdoc variant, and a latent ISO 18013-7 session transcript bug in OpenID4VPHandover. All three fixed and covered by tests before the April 16 clean runs.

• 2026-04-10

  OpenID4VP 1.0 Final conformance — first plan

  SD-JWT-VC, x509_san_dns client identifier scheme, direct_post.jwt response mode: 9/9 modules passed, zero warnings. Plan KZMp9lCTOWg0A is immutable and publicly accessible.

• 2026-04-10

  Positioning pivot: mdoc AV as production default, ZK as alpha

  After a Barretenberg vulnerability advisory in March 2026, the production path becomes the mdoc attribute check aligned with the EU Age Verification blueprint profile eu.europa.ec.av.1. The Noir zero-knowledge circuit moves to opt-in alpha until the vulnerability is patched and the Noir 1.0 migration is complete.