# Changelog — DBAOps Sovereign™

All notable customer-visible changes are summarized here.  
**Vendor:** RHOYLLE INNOVATION EMPIRE LLC.

## 1.3.0 — Gold Master (GM) — customer ship baseline (2026-03)

This version is designated **Gold Master**: use **`docs/RELEASE-GOLD.md`** for sign-off and **`npm run verify:smoke`** (with API running) for automated checks.

### Added

- **License enforcement middleware** — When `ctl.License` is not `OK`, **mutating** HTTP methods return **403** `LICENSE_BLOCK` (ingest, fleet register, baseline capture, alert ack, etc.). **GET** remains for dashboards and `/api/license`.
- **Production startup checks** — Process **exits** if `NODE_ENV=production` and `JWT_SECRET` is still the development placeholder.
- **Login rate limiting** — `POST /api/auth/login` limited per IP (stricter in production). **`trust proxy`** enabled in production for correct client IP behind reverse proxies.
- **Documentation** — `docs/CUSTOMER-DEPLOYMENT.md` production checklist.

### Changed

- **500 errors** in production return a **generic message** (no internal error text leakage).
- **Health** payload includes `enforceLicense`.

### Prior releases (summary)

- **1.2.x** — OpenAPI export, readiness probe, SQL connection fix for Windows auth, fleet coverage APIs + collector, mock/DB modes.
- **1.1.x / 1.0** — Telemetry vertical, JWT auth, audit, baseline/drift, licensing engine.

---

© 2026 RHOYLLE INNOVATION EMPIRE LLC.
