v2.32.0

Features

• AI data protection policy for databases — you can now assign a data protection policy that applies to every AI query against a database. It combines with the acting user's own policy, with the stricter redaction winning per column, so the AI can be limited regardless of who it acts as (including super admins).

Improvements

• Shared queries now use a relative expiry (e.g. "30 Days" or "6 Hours") instead of picking an exact date and time, and your chosen timeframe is remembered and pre-filled the next time you share a query.

Bug Fixes

• Closed a privilege-escalation hole: only super admins can now grant elevated permissions or assign roles. Managers and other users can no longer escalate permissions when inviting, creating, or updating users.
• The role settings page no longer errors when a role includes members imported from GitHub or Linear who don't have a login account; they now display by their integration name.
• Locked onboarding steps can now be skipped, so onboarding is no longer a dead-end.