Changelog

What changed, and when

Notable releases of the Provenrail SDK, the open-source verifier, and the platform. The Python package is on PyPI and the recording SDK is on npm.

0.2.1June 11, 2026CLI

Verify your own run, free and local. New pr export pulls a run you recorded out of the local sink into a bundle, so you can close the full loop on your own machine: record, pr export, pr verify, with no account.
quickstart keeps a read token. pr quickstart now saves a read token in .provenrail.json, which is what makes pr export work with zero extra setup.
Deterministic tests. The test suite no longer reads the developer's installed license, so free-tier behavior is verified consistently on every machine.

0.2.0June 11, 2026CLI

Commercial licensing. pr activate verifies a signed license key fully offline and runs the self-hosted deployment at the licensed tier. Plan limits and feature gates are enforced server-side; the integrity guarantee never depends on any of it.
Install that survives a system Python upgrade. Recommended install moved to uv tool install provenrail, which brings its own pinned Python.

0.1.xJune 2026Launch

The core. Off-box, hash-chained, signed records with an append-only sink and an independent server receipt chain.
Two SDKs in lockstep. Python and TypeScript recording SDKs producing byte-for-byte compatible records, with drop-in capture for OpenAI, Anthropic, LangChain, and MCP.
An offline verifier. pr verify and an in-browser verifier that trust nobody, backed by a frozen public conformance suite both must agree on.
Trusted time and transparency. RFC 3161 timestamps, a witnessed transparency log, SCITT COSE receipts, verifiable redaction, and OpenTimestamps (Bitcoin) proof verification.
Evidence packs. One-command attestation and regime evidence packs for EU AI Act and HIPAA mapping.

Dates reflect public release. For the precise commit history, the SDKs, verifier, and spec are open source under MIT.