2026-08-28
Engineering
Runtime boundaries became explicit.
The local development loop now uses the same named HTTPS route model as the deployed product, while Preview and Production declare their authentication, storage, and integration boundaries explicitly.
Added
Named HTTPS runtime routes
Local Portless development now keeps browser and API traffic on the secure named routes, including clean and prefixed development hosts. Focused browser coverage protects the app-to-API transport boundary from mixed-content and malformed-host regressions.
Changed
Preview and Production runtime contracts
The environment contract now distinguishes live authentication, sandbox storage, and controlled external integrations so Preview can behave like the product without becoming a second production client.
Safer routes, testing, and releases
Route ownership and local test environments now share one clear contract, keeping the public website, product app, API, Preview gateway, and browser tests aligned as the platform grows.