v0.3.0

GPO deployment artifacts

The Artifacts tab now renders a ready-to-run GPO creation script per tenant: a New-GPO / Set-GPRegistryValue PowerShell script that creates or updates a named GPO carrying the force-install and managed storage values for both Chrome and Edge, then prints the New-GPLink command to run when you are ready to link an OU. The script and the .reg files derive from one shared registry-writes table, so they are provably in sync (locked by golden tests). Links to Check's upstream ADMX/ADML templates (pinned at Check v1.1.0) sit alongside for once-per-domain import.

Webhook relay for false positives

Set the new False positive relay URL instance setting and every report the extension POSTs to /hook/{guid} is forwarded as JSON to your automation platform (n8n, Power Automate, or any webhook receiver) with tenant id and name included for ticket routing. Best effort by design: one attempt after the durable inbox insert, https only, and a dead relay never delays the reporting extension.

Version footer and update path

The dashboard footer shows the running version, links to releases, and flags newer releases (checked from your browser, never the Worker). The runbook gains an Updating a deployed instance section covering the deploy-button copy and local clone paths.

Also

• Artifacts warn when CIPP reporting is enabled without a tenant id or domain (unattributed events), with a note on when empty is fine (CIPP standard deployments).
• The CIPP tenant field label explains the same on the Policy tab.

Full changelog: v0.2.0...v0.3.0