v2.56.0 — autopilot production depth (Wave F)
Turns the demo into a really-operated pipeline (reference: rcm).
- Auto case-ingestion (webhook) —
POST /api/autopilot/ingest(HMAC-SHA256) starts a run from a source-system payload and pushes the signer; a bad signature → 401. - Tamper-evident audit — every entry hash-chained;
verifyAudit()+/verifydetect any edit. - Encryption at-rest — AES-256-GCM run files when
GREAT_CTO_ENCRYPT_KEYis set; transparent decrypt. - Submission receipt + retry — the post-gate write records generated-vs-submitted · connectors · attempts, with backoff retry against a real provider.
- License attestation on every signature · regulator-format
/export(the signed determination, not JSON) · retentionpurgeRuns().
293 lib tests.