RubricTrail v0.8.2 — Sharing, Recovery & Mobile Reliability

Highlights

• Creating a new assignment or restoring a backup as new now safely reactivates a strictly cleared workspace after whole-workspace privacy deletion, while preserving the existing lock, journal, digest, reserve and readback checks.
• The mobile Project Tracker summary now remains readable at 320 px in English and Simplified Chinese, with its metrics below the title and a usable task-summary column.
• The static GitHub Pages demo now has a Pages-only canonical, absolute Open Graph and Twitter metadata, a deterministic 1200 × 630 social image, the existing local favicon, project-level robots guidance and a one-URL sitemap.
• The repository now records dated Firefox and Playwright WebKit checklist evidence with an explicit browser-evidence boundary.

Privacy and compatibility

• Public metadata and preview assets are same-origin and use only fictional repository material.
• No analytics, telemetry, account, remote-storage or public Live AI runtime was added.
• The persistence schema, project-state version and single-project backup v1 format are unchanged.
• Dependencies and pnpm-lock.yaml are unchanged.

Browser evidence boundary

• The documented Firefox 154.0.1 and Playwright WebKit 26.5 / build 2311 checks on Windows 11 apply to the pre-release public revision 0d9255bfe7724d1de72a8027ea3b1c9582a33962.
• Playwright WebKit is not Safari. This release does not claim Safari, macOS, iOS, physical-device, accessibility or blanket browser certification.
• The independent final public product smoke below used Playwright Chromium only.

Limitations

• Metadata can improve link-preview and crawler clarity but cannot guarantee preview refresh, indexing, ranking or adoption.
• A project-level /rubrictrail/robots.txt cannot control the user-site origin-root robots.txt.
• Firefox and Playwright WebKit are not added to CI by this release.

Verification

Release target e1b6ff6e7fd12096411e450335220383d9d4a22c passed:

• exact-main CI run 33325380028: quality, browser and pages-static;
• exact-SHA Pages run 33325695189: freshness, build, deploy and smoke;
• exact public deployment-marker verification;
• independent HTTP and metadata checks for the canonical, social URLs/image, favicon, robots, sitemap and same-origin static assets;
• a fictional-data Playwright Chromium public journey covering empty and cleared workspace creation, second-assignment switching, task persistence, backup/reset/restore, 320 px English and zh-CN Tracker containment, zero horizontal overflow, zero Live API/OpenAI/third-party browser traffic, and final temporary-state cleanup.

RubricTrail v0.8.1 — Real-Time Calendar Status

Fixed

• Calendar Today now follows the browser-local current date.
• Today and Planning date are distinct concepts.
• Calendar, Project Tracker, Dashboard and Up Next overdue status advance with the actual local date.
• Existing task target dates do not slide automatically as time passes.
• Uploaded-project planning baselines normalize the already-supported creation instant to a stable UTC date so browser timezone changes do not reschedule the plan.

Compatibility

• No persistence migration.
• Backup v1 is unchanged.
• The workspace storage protocol is unchanged.
• ICS task dates are unchanged.
• No dependency or lockfile change.

Limitations

• Historical v0.8.0 projects did not persist an explicit planning-baseline date or original creation timezone; the createdAt instant's UTC date is therefore the deterministic compatibility baseline.
• Manual task-date editing and drag-and-drop remain out of scope.

Verification

Release target 39eedac passed exact-main quality, browser and pages-static CI; exact-SHA Pages freshness, build, deploy and smoke; exact public deployment-marker verification; and a fictional-data public product smoke covering Today, Planning date, overdue status, stable targets and 320px containment.

RubricTrail v0.8.0 — Multi-Assignment Workspace

RubricTrail v0.8.0 makes My Assignments the product home while preserving each assignment's existing Brief, Rubric, Plan, Check, Progress, Project Tracker and Calendar workflow.\n\n## What is included\n\n- My Assignments Dashboard with real per-assignment progress, deadlines, blocked/overdue counts and cross-assignment Up Next.\n- A prominent New assignment flow for upload, pasted details, fictional sample, or restoring a portable single-project backup as a new assignment.\n- Multiple independent local assignments with safe switching and per-project persistence.\n- Journaled migration from valid v0.7.1/v3/v2/v1 local data; conflicts, stale tabs, crash recovery, quota and Web Locks failures remain fail-visible.\n- Restore as new, replace selected, project deletion, whole-workspace privacy deletion, generation rotation and explicit recovery boundaries.\n- English and Simplified Chinese UI, responsive 320px behavior, keyboard/focus protections, local OCR, Project Tracker, Calendar and browser-local ICS.\n\nRubricTrail remains local-first and account-free. The public static demo has no Live AI runtime; project content is not sent to RubricTrail servers. GitHub Pages receives ordinary page and asset request metadata.\n\n## Revision chain\n\n- Storage foundation: PR #44 head

RubricTrail v0.7.1 — Project Tracker & Calendar

Highlights

• Adds a global Project Tracker rail, strip, drawer/sheet, task focus, and cross-view progress state.
• Adds Calendar planning and standards-compliant ICS export for planned tasks.
• Preserves local-first storage, exact source traceability, canonical source IDs, and existing privacy boundaries.
• Includes calendar snapback and dependency-order reliability fixes plus focused accessibility and mobile coverage.

Verification

• Final merged main SHA: 2702ec4fe836fa0c00ca395c55bad138b86cbbfc
• Exact-main CI: run 32110199723 (quality, browser, pages-static all passed).
• Exact-SHA Pages workflow: run 32110579550 (freshness, build, deploy, smoke all passed).
• Public Pages smoke confirmed the deployment marker, same-origin static assets, and disabled Live boundaries at https://sion612.github.io/rubrictrail/.
• Release-evidence documentation: PR #39.

Boundaries

RubricTrail remains a local-first browser tool. It does not add multi-project sync, provider-backed storage, reminders, or invented appointments. Live AI remains optional and disabled in the static Pages demo.

RubricTrail v0.7.0 — Local OCR & Calendar Planning

RubricTrail v0.7.0 adds local image OCR, post-creation source-locator editing, a transient Plan Calendar, and a browser-local ICS snapshot while keeping coursework in the browser.

Highlights

• Recognize English and Simplified Chinese assignment screenshots locally with same-origin OCR assets.
• Add, edit, or remove a manual source locator after project creation without turning Rubric into a general criterion editor.
• Open a Plan Calendar of target completion dates derived from the existing Action Plan.
• Download a one-way local .ics snapshot of remaining tasks and the deadline.
• Keep static demo assets same-origin and omit Live API routes from the public Pages export.

Important boundary

Calendar dates are target completion dates, not reserved appointments. There is no calendar sync, reminder, subscription URL, or time block. Importing the .ics file into an external provider may cause that provider to store assignment metadata.

Verification

• Product SHA: 3ee8b76ee1c57a45f7ae1352a8c404f65c2ebd79
• Final release SHA: d0134d89b5bf6c92278988759c20001ade700147
• Exact-main CI run 31993864121: attempt 1 failed one mobile-chrome two-page PDF test; attempt 2 passed quality, browser 48/48, and pages-static 48/48 on the unchanged product SHA
• Evidence CI run 31997011123: quality, browser, and pages-static all passed
• 381/381 Vitest tests across 31 files, plus OCR and deployment-smoke Node tests
• 48/48 production Chromium executions through next start
• 48/48 static-demo Chromium executions under /rubrictrail
• 62-file static artifact audit passed; 354,590-byte initial gzip payload stayed below the 357,000-byte budget
• Full high-severity dependency audit: no known vulnerabilities
• Product Pages deployment 31996091011 and evidence Pages deployment 31997311268: freshness, build, deploy, and live smoke passed

Try it

Open the public RubricTrail demo

No account, API key, analytics, or paid service is required for the static demo.

RubricTrail v0.6.0 — English / 简体中文

RubricTrail v0.6.0 adds a single-URL English and Simplified Chinese interface while keeping project data, backups, and user coursework unchanged.

Highlights

• Switch between English and 简体中文 from the welcome screen or workspace header.
• Detect the browser's first supported preferred language and remember the choice in the separate rubrictrail.preferences.v1 preference.
• Localize navigation, intake, confirmation, planning, self-check, progress, recovery, accessibility labels, dates, and numbers.
• Preserve uploaded or pasted source text, project titles, course names, rubric criteria, excerpts, filenames, and student drafts verbatim.
• Add a concise Simplified Chinese README and combined bilingual static metadata.
• Defer workspace phases and enforce a 357,000-byte initial static gzip budget.
• Improve narrow-screen notification stacking, evidence-drawer loading, form labels, and preference-save failure feedback.
• Raise the transitive nanoid@3 security override to patched version 3.3.18.

Important boundary

The language switch localizes the product interface only. Automatic extraction remains optimized for English assignment materials. Chinese source material must still be checked carefully against the original before saving.

Verification

• Final release SHA: 31694be9591e8b12bedea6a09dd2cd256d2b4e27
• Final exact-main CI run 31881558364: quality, browser, and pages-static all passed
• 298/298 Vitest tests across 26 files
• 30/30 production Chromium executions through next start
• 30/30 static-demo Chromium executions under /rubrictrail
• 44-file static artifact audit passed; 346,687-byte initial gzip payload stayed below budget
• Full dependency audit: no known vulnerabilities
• Exact-SHA Pages deployment 31881689717: build and deploy passed

Try it

Open the public RubricTrail demo

No account, API key, analytics, or paid service is required for the static demo.

RubricTrail v0.5.0

Public, verifiable browser demo

RubricTrail v0.5.0 makes the complete local workflow directly tryable without cloning the repository, creating an account, supplying an API key or using a paid service.

Try it: https://sion612.github.io/rubrictrail/

Added

• A separate browser-only static export that reuses the product UI while leaving the Node runtime and optional Live adapters intact for self-hosting.
• Static CI at the real /rubrictrail subpath, including the full local workflow, persistence, responsive coverage, real PDF parsing and the exported PDF worker.
• A fail-closed artifact audit for Live API paths, OpenAI endpoints and Live credential/configuration markers.
• An exact-revision Pages workflow that deploys only after the same-repository main CI succeeds, with a main-only deployment environment.
• A top-of-README public demo path plus honest hosting, storage and backup disclosures.

Trust boundary

• The public demo contains no Live API routes and makes no OpenAI request.
• Selected file contents and project state are processed and stored in the browser; GitHub Pages still receives ordinary page and asset request metadata.
• GitHub Pages controls the live HTTPS, caching and response headers. The static demo does not inherit the self-hosted Node runtime's configured headers.
• Browser storage is origin-scoped, not isolated by /rubrictrail.
• Backups remain unencrypted and unsigned; use trusted documents and keep backups private.

Verification

• Final main commit: b8d80b0c71490b99d68b55d577cd5a835d312eab
• Exact-main CI: run 31593393903
• Exact-SHA Pages deployment: run 31593580751
• ESLint and TypeScript passed; 261/261 Vitest tests passed across 19 files; both production builds and the full dependency audit passed.
• Node runtime: 28/28 Playwright executions through next start.
• Static artifact: 28/28 Playwright executions under /rubrictrail; all 29 exported files passed the boundary audit.
• Live smoke: homepage and all 11 HTML-linked assets returned 200; the same-origin exported PDF worker returned 200; absent Live routes returned GET 404 and host-level POST 405.

The complete browser suite ran against the generated artifact in CI. The live-host check is an HTTP smoke test, not a claim that GitHub Pages ran that suite, inherited Node headers, or received a penetration test.

RubricTrail v0.4.1

Release-grade production verification

RubricTrail v0.4.1 closes the gap between a successful production build and the browser runtime actually exercised by CI.

Changed

• The browser job now creates its own clean production build and runs all Playwright journeys through next start.
• CI rejects accidentally committed focused Playwright tests.
• Local browser-test iteration continues to use next dev; the production-server switch is explicit in CI.

Production HTTP contract

• Verifies the configured anti-framing, MIME-sniffing, referrer and browser-capability response headers.
• Verifies that X-Powered-By remains suppressed.
• Verifies that both optional Live API routes return uncached structured 503 responses without contacting a provider when Live mode is disabled.

Verification

• Exact main commit: 1aa7527c57aaee73aa2770ccc7857de132ec82ef
• Exact-main CI: run 31587994346
• ESLint, TypeScript, 257/257 Vitest tests, two independent production builds and dependency audit passed.
• Playwright: 28/28 executions passed through next start with no retries.

These checks validate the built Node runtime and declared HTTP contract; they are not a public deployment, penetration test, CSP/HSTS claim or complete security assessment.

RubricTrail v0.4.0

RubricTrail v0.4.0 hardens untrusted assignment intake and compact evidence provenance.

Highlights

• malformed TXT byte sequences now fail as recoverable UTF-8 errors instead of silently changing assignment text
• saved and restored evidence cross-checks safe filenames, bounded source IDs, source membership and excerpt spans
• deceptive control and bidirectional filename characters fail closed
• projects written by early releases recover their historical wider evidence spans without losing the project
• evidence UI now calls filenames, pages and excerpts recorded aids and asks users to re-check the original

Verification

• exact main commit: 8dd2cccf6dd6bc3ffa6c76e4597a9f3ef405feec
• exact-main CI: https://github.com/Sion612/rubrictrail/actions/runs/31586206411
• ESLint and TypeScript passed
• 257/257 Vitest tests passed across 19 files
• standard Next.js 16.3.0 production build passed
• 26/26 Chromium executions passed across desktop and narrow responsive viewports
• dependency audit reported no known vulnerabilities

RubricTrail remains local-first. Full source documents are discarded after intake; retained excerpts and source labels are recorded aids, not independently verified originals.

RubricTrail v0.3.9

What changednn- Revalidates confirmed reset, sample handoff, backup restore, and older-version promotion inside the exclusive browser-storage lock.n- Lets the latest confirmed load, keep, restore, or reset choice supersede older queued choices.n- Cancels stale replacement operations before any browser-storage byte changes.nn## Verificationnn- Exact-main quality job passed: lint, typecheck, 235 tests, production build, and dependency audit.n- Exact-main Chromium browser job passed all 24 responsive executions.n`nFull details are in CHANGELOG.md.