Architecture §7.4.2: the ledger is backfilled (#653)
Architecture §7.4.2: losing Indexterity itself — the observation ledger (#653)
Architecture §4, §15.0; Running: the tunnel service drains on SIGTERM (#649)
Architecture, Connecting a cluster: a restart is put back across, and the dashboard says why a drop waits (#641, #642)
Security: carry GHSA-xcx6-jx8p-x3h5 (MSAL), unreachable from SQL authentication
Architecture §8.1, §11: the footprint chart's day is what its collect measured (#640)
Architecture §7: a week of the hourly passes' durations (#639)
Architecture: a paced timeout mails only once pacing has run out (#637)
Architecture §3: a blind window has its own check and stops refusing 30 days after it ends (#631)
Architecture: a restart starts the hide wait over and says so; one failing hide no longer stops the rest (#630)
Architecture §9: finalize reads Query Store through the attribution cache (#629)
Failure check: only failures a hidden index can cause count; the ring's reach and how to size it (#625)
Architecture: each engine names its proposed indexes; PostgreSQL's carry the table (#617)
Fit the hosted deployment in its free allowances: folded latency reads, batched SQL Server storage, compression (#614)
Architecture: a build the table already has is not built (#612)
Architecture: open recommendations only, undo from the trail (#606); the overview's cards and what a build changed (#608)
Tell a cluster about a new privilege only once a check finds it missing (D184 revised, #599)
A privilege a release adds is optional, announced once, and grantable in one step (D184, #599)
Indexterity keeps the MongoDB profiler on for a drop in flight (D183, #596)
Failed-operations check: say why it was skipped, and what a profiler cannot see (#596)
The pass budget is five minutes, not a setting; pacing gives a slow cluster longer
The plan cache sizes itself from the heap, evicts plans not databases, and keeps suggest's facts (#588, D146)
suggest is paced like collect; the probe ships at most 250 plans a database (#588, D179, D146)
The images ship no node_modules: every api entrypoint is a bundle (#580, D182)
The scrubber removes a failed query's values; Sentry 11 states every data category (#579, D181) Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
The shipped api tree holds one .node file since Sentry 11, which nothing loads (D181, #570) Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
Behind a proxy that appends to X-Forwarded-For, believe the CDN's header: CLIENT_IP_HEADER (D180, #574) Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
A collect that does not fit is paced: longer and less often by the same factor (D179, #571) Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
Every pass records how long it took: cluster_pass_timings and the Passes panel (D178, #571) Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
TRUST_PROXY names addresses: fastify 5.12 trusts no hop for a count (D177) Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>