Signify Creator v1.1.0

Signify Creator v1.1.0

This release expands Signify Creator's self-hosted SaaS foundation with
commercial licensing, signed updates, transactional account email, stronger
readiness checks, and repeatable Microsoft 365 and Stripe acceptance tooling.

Licensing and editions

• Community Edition defaults to one workspace and ten managed users.
• Signed Enterprise entitlements unlock additional tenants and user capacity.
• License activation, refresh, revocation, reinstatement, expiration, offline
  grace, installation binding, and safe Community downgrade are enforced by the
  server.
• Tenant and user limits apply to every creation path, including concurrent
  requests.

Managed releases

• Private GitHub release detection runs periodically from encrypted credentials.
• One-click updates verify package size, SHA-256, Ed25519 signatures, release
  inventory, and migration compatibility.
• Updates create a safety backup, require the new process to pass readiness, and
  roll back automatically on failure.

Account delivery and readiness

• Resend transactional email supports registration verification, password
  recovery, and invitations.
• Provider credentials are verified before encrypted storage.
• Durable delivery jobs retry transient failures, prevent duplicate sends, and
  scrub sensitive message content after completion.
• Production registration fails closed when account email delivery is not ready.

Microsoft 365 and Stripe

• Microsoft 365 acceptance verifies application roles, organization identity,
  directory access, sender-mailbox access, and sandbox mail delivery.
• Stripe acceptance verifies test mode, mapped recurring prices, webhook signing,
  all required events, and a disposable hosted Checkout session.
• Sanitized acceptance reports exclude credentials, access tokens, and customer
  records.
• Stripe remains restricted to the Application Owner control plane.

Signature operations

• Managed Outlook signatures are removed when a member or subscription becomes
  inactive and resume after entitlement restoration.
• The Banner Card preset adds an integrated technology banner, compact identity
  row, initials fallback, and an Outlook-visible shadow layer.
• Thirty-day trial enforcement disables editor reads and writes after expiration
  and presents the subscription recovery flow.

Security and verification

• Full formatting, lint, syntax, security, secret, unit, integration, smoke,
  artifact, startup, CodeQL, OSV, and dependency-audit gates passed.
• Production dependency audit: zero known vulnerabilities.
• Release artifact inventory: 146 checksummed files, 28 SQLite migrations, and
  10 PostgreSQL migrations.
• The README includes current installation, configuration, licensing, update,
  and provider-acceptance guidance with an Application Owner screenshot.

External acceptance limitation

Live Microsoft 365 mail and Stripe Checkout acceptance was not executed because
sandbox provider credentials were not supplied. The acceptance runner and
controlled provider regression suite pass, and the live command fails closed
until both sandbox providers are configured.

Distribution limitation

The full release and GitHub-generated source archives are published. The signed,
one-click installer artifact is intentionally withheld because the production
License Authority public URL and verification key are not configured in GitHub.
The only currently available authority address is a local test endpoint, which
must not be embedded in a customer release. Release signing is configured and
will remain fail-closed until the production authority identity is supplied.