Verified automatic SQLite backups
- Production now creates daily consistent SQLite snapshots in private object storage
- Every snapshot passes SQLite integrity checks and records SHA-256 checksums before it is accepted
- Backups are compressed, retained for 14 days, and protected against duplicate uploads after restarts
- The public health endpoint reports backup state and timing without exposing credentials or object names
- A production restore drill verified the downloaded archive independently from the live volume
Persistent SQLite storage and production Bitcoin anchoring
- Production storage moved from MongoDB to embedded SQLite on a durable volume
- 1,425 records across 19 collections migrated with count, identity, checksum, and integrity verification
- Self-hosted installations no longer require a separate database server
- OpenTimestamps 0.7.2 is bundled in the Docker image and submits existing SHA-256 digests to four public calendars
- The health endpoint now reports persistent storage and blockchain runtime status
- API redirects, pagination, idempotency, Auth issuer checks, SDK contracts, and reproducible builds were hardened
- SQLite-backed signing downloads now preserve the exact uploaded file bytes
- Automated live checks now validate fail-closed Auth when no trusted issuer is configured
Wave 4 — evidence, stats wall, ceremonies, dev tools
Ops, embed v2, and polish
- Status page and
/status.json
- Open Graph cards on timestamp proof pages (social share previews)
- Webhook signature tester
- Embed badge v2 —
data-otrust-theme (light/dark)
- Extension encrypted backup export
- Sign workspace polish; docs sync; SDK webhook options
- Firefox AMO listing + deploy checklist
Feature pack — privacy, sharing, and integrations
- Receipt history is browser-local only (server list endpoint disabled)
- Encrypted backup/import for keys + local history
- Share proof cards (PNG + copy text) after timestamp
- Bitcoin confirmation toast in History tab
- Webhook on Bitcoin confirm (
notify_webhook on claim)
- Embeddable trust badge (
/embed, /stats/badges.json)
- Verify-page bookmarklet
- CLI:
history, ipfs-export
- Firefox extension ID + Telegram bot scaffold
Automatic Bitcoin confirmation emails
- Opt-in email alerts when OpenTimestamps confirms on Bitcoin (~1–2h)
- Works for single, bulk, text, and browser extension timestamps
- Email is stored separately and deleted after the confirmation message is sent
- Extension v1.1.0 with matching UX and email opt-in
Bento UX, Bitcoin clarity, and ops tooling
- Homepage bento redesign with primary CTA to timestamp a file
- Advanced timestamp tabs collapsed behind More
- Bitcoin anchoring called out in hero, principles, and receipt notes
- QR codes on new timestamps for quick verification
- History tab polls pending receipts until Bitcoin confirms
- Auth demo flow + Hemsted branded example
- Live transparency metrics with auto-refresh
- Self-host health checklist, use-case guides, partner theme preview
- CI: live smoke tests, Playwright e2e, Lighthouse gates
- Core → opensource sync script
Proof share URL fix
/proof/prf_* attribute proofs now serve the proof-view page (not 404)- Integration tests for
id_* and prf_* share URLs