v0.1.1

Security

• The frontend container mounts /tmp as a tmpfs and nginx no longer buffers
  /api/ responses, so uploads and results are never spooled to disk. Running
  the image outside compose.yml requires mounting that tmpfs yourself — see
  Data retention.
• Request ids are no longer written to the backend log; a short hash is logged
  instead.

Changed

• Results now expire 15 minutes after they were created rather than after last
  use, and the top bar shows the remaining time and extends it on demand. New
  RESULT_CACHE_TTL_MINUTES, RESULT_CACHE_EXTENSION_MINUTES,
  RESULT_CACHE_MAX_LIFETIME_MINUTES and RESULT_CACHE_MAX_ENTRIES — see
  Configuration.
• New DELETE /api/v1/anonymize/{request_id}, called by the review UI when a
  document is closed so the server-side copy ends immediately.
• .env.example ships DETECTORS=rules with the LLM block commented out, so
  cp .env.example .env && docker compose up -d --build starts a working stack.
• Hospital units (Klinik für Kardiologie, Station 4B) are now detected as
  ORGANIZATION by both the LLM prompt and new rule recognizers.

Removed

• The unimplemented privacy_filter detector and its PRIVACY_FILTER_ENABLED /
  PRIVACY_FILTER_BASE_URL settings.

Full Changelog: v0.1.0...v0.1.1