GHAN changelog

2026-09-22 — Machine-readable site

The whole of ghan.io rebuilt as server-rendered static pages with a markdown twin for every URL, a connected JSON-LD graph, llms.txt and llms-full.txt, an OpenAPI document, and the agent-discovery files at /.well-known/. Content negotiation returns text/markdown to any agent that asks for it.

Affects: docs, llms.txt.

2026-09-22 — Supabase live, ledger proven on the real database

Core schema and the append-only ledger triggers applied to a production Postgres instance. A test suite runs the migration against a real Postgres 16 and proves UPDATE, DELETE and TRUNCATE on ledger all fail. Row-level security enabled everywhere and the public API roles revoked, closing a PostgREST exposure found during the same session.

Affects: transparency, how it works.

2026-09-22 — Stripe sandbox wired

Connect Express onboarding and platform payment configuration in sandbox, with a statement descriptor suffix so a charge from GHAN is recognisable on a partner's statement.

Affects: pricing.

2026-09-21 — Offline geo and datacenter detection

Geo and ASN lookups moved to an offline MaxMind-format database, so no partner IP address leaves GHAN's infrastructure on the hot path. Datacenter detection is approximated from the autonomous system owner with a deliberately conservative allowlist, because a false positive silently discards a real install and costs a partner money.

Affects: fraud prevention, attribution.

2026-09-21 — Signing and rate card

ed25519 signing with canonical JSON serialisation, and the rate card as versioned code published through get_rate_card.

Affects: pricing, docs/mcp.

2026-09-20 — Monorepo scaffold

API, MCP server, jobs and dashboard applications scaffolded; shared package for schemas, event types, signing and the rate card; forward-only SQL migrations with a runner that refuses to proceed if an applied migration's checksum changed.

Affects: status.