Changelog

What changed in walwarden, newest first, plus the honest roadmap of what is not yet shipped.

What changed, newest first. Each entry is dated. Roadmap items are kept in a clearly separated block and are explicitly labeled not yet shipped.

2026-06

Documentation IA refactored to a task-first structure. Docs are now organized as Start here, Guides, Reference, Explanation, and Changelog, with dual CLI-first and agent-assisted quickstarts.

Operator-initiated restore via the CLI shipped. The dashboard issues a short-lived token; the CLI runs pg_restore on a machine you control, with the full audit chain recorded.
Evidence bundle export and verifier tooling shipped. @walwarden/verifier runs offline; verifying a real Evidence bundle requires the matching public key and a successful verifier run.
Production public-key endpoint observed ready (2026-07-14). The canonical well-known endpoint returned an Ed25519 public key. Publication alone does not prove that a production Evidence bundle was signed by the matching private key.
Dashboard backup history and RPO-at-a-glance shipped.
Scheduled logical backups (pg_dump) to BYO S3 shipped for Neon and Supabase Postgres, with Ed25519-signed manifests and an append-only audit chain.

These items are on the roadmap and not yet available. They are listed here for transparency only; nothing below works in the product today.

Item	Status
AWS RDS / Aurora as a connected provider	On the roadmap — not yet available. Shipping providers today are Supabase and Neon.
Automated restore drill (cron-driven, ephemeral target)	On the roadmap — not yet available.
Continuous PITR / WAL streaming	On the roadmap — not yet available.
Automated (unattended) restore verification	On the roadmap — not yet available.
Customer-managed encryption keys (BYOK)	On the roadmap — not yet available.

For why these limits exist, see What is not shipped.