Releases

All Aira components share a single version number. When we release, the API, dashboard, Python SDK, TypeScript SDK, and Docker images all get the same tag.

Install / upgrade:

pip install aira-sdk==3.7.0        # Python
npm install aira-sdk@3.7.0         # TypeScript
./upgrade.sh                       # Self-hosted (latest)

v3.7.0 — June 10, 2026

Highlights

• Dark mode — toggle in sidebar footer, persists to localStorage, respects system preference
• Analytics dashboard — time-series charts for actions, approval rates, model agreement, policy denials, top agents (recharts)
• Onboarding wizard — 3-step getting-started flow for new orgs (register agent → authorize action → see receipt)
• Global search (Cmd+K) — command palette to search actions, agents, cases, policies, and navigate
• Richer notifications — drift alerts, webhook failures, settlement completions, compliance reports ready
• Bulk operations — multi-select with checkboxes on actions, agents, API keys tables
• TypeScript SDK fully typed — 19 new interfaces, zero Record<string, any> returns
• 5 blog posts — EU AI Act, cryptographic receipts, zero-downtime deploys, multi-model consensus, open-source models
• 4 documentation guides — troubleshooting, self-hosted developer setup, batch processing, version migration
• CI runs tests — all repos now run tests before build/deploy. No broken code ships.

Dashboard

• Dark mode with Sun/Moon toggle in sidebar — uses CSS custom properties, works on every page
• Analytics page at /dashboard/analytics — 5 charts with 7d/30d/90d period selector (admin-only)
• Onboarding banner on overview page for new orgs (0 actions), links to /dashboard/getting-started
• Command palette (Cmd+K / Ctrl+K) — fuzzy search across recent actions, agents, cases + nav shortcuts
• Notification bell now shows drift alerts, webhook delivery failures, sealed settlements, ready compliance reports
• Bulk operations: checkbox column + floating toolbar on actions (legal hold, export), agents (suspend), API keys (revoke)

API

• GET /api/v1/analytics/actions-over-time — daily/weekly action counts
• GET /api/v1/analytics/approval-rates — approved/denied/review breakdown
• GET /api/v1/analytics/model-agreement — consensus case agreement scores
• GET /api/v1/analytics/policy-denials — denial rates by action type
• GET /api/v1/analytics/top-agents — top agents by action volume
• POST /api/v1/actions/bulk-legal-hold — set/release legal hold on multiple actions
• POST /api/v1/actions/bulk-export — export receipts for multiple actions
• POST /api/v1/agents/bulk-suspend — suspend multiple agents
• POST /api/v1/api-keys/bulk-revoke — revoke multiple API keys
• Notifications endpoint now returns 4 additional types: drift_alert, webhook_failure, settlement_sealed, report_ready

SDKs

• TypeScript (npm install aira-sdk@3.7.0): 19 new response interfaces — Policy, SanitizeResult, WebhookInfo, UsageSummary, DriftAlert, and more. All client methods fully typed.
• Python (pip install aira-sdk@3.7.0): Version bump.

Infrastructure

• CI pipelines now run tests before build/deploy on all 6 repos
• Backend: pytest (2033 tests) gates deployment
• Frontend: tsc --noEmit + vitest (527 tests) gates deployment
• Docs/handbook: next build validates all MDX pages before deploy
• SDKs: Python 3.12→3.13, Node 20→22 in CI

Bug fixes

• Fixed missing settings import in action_notary_service.py — endpoint whitelist strict mode was crashing
• Fixed missing settings import in article6_explanation.py — PDF generation was crashing
• Fixed 70 frontend test failures (api-client URL prefix, stale CSS class assertions, stale model names)
• Fixed 24 backend test failures (admin 403→404 assertions, free-tier model restrictions, plan config values, metrics auth)

Docs

• 4 new guides: troubleshooting, self-hosted developer setup, batch processing, version migration
• 5 new blog posts on EU AI Act compliance, cryptographic receipts, zero-downtime deploys, multi-model consensus, open-source models

v3.6.0 — June 10, 2026

Highlights

• Claude Fable 5 — Anthropic's most capable model, available as built-in model for Pro plans and above. Also available via Bedrock and Vertex AI.
• Dynamic version reporting — /health endpoint now returns the actual running version (was hardcoded). Self-hosted customers can check their version programmatically.

Models

• Added claude-fable-5 — state-of-the-art on nearly all benchmarks, exceptional autonomous agents
• Available via Bedrock (bedrock:claude-fable-5) and Vertex AI (vertex:claude-fable-5)
• Pro plan and above (added to free-tier block list)
• Total built-in models: 36

API

• /health and / endpoints now return the version from pyproject.toml dynamically (was hardcoded as 1.1.0)
• Self-hosted customers can check their running version: curl https://your-domain/health | jq .version

SDKs

• Python (pip install aira-sdk==3.6.0): Version bump. PyPI
• TypeScript (npm install aira-sdk@3.6.0): Version bump. npm

Docs

• Supported models page updated with Claude Fable 5
• Performance benchmarks page published

v3.5.2 — June 7, 2026

Highlights

• Caddy replaced with Traefik v3.6 — Docker-native health-aware routing. True zero-downtime deploys without drain file hacks.
• Legal pages updated — comprehensive Terms of Service, DPA with BYOK clarity, sub-processor lists corrected.
• API key dialog fix — dialog no longer closes instantly after key creation.

Infrastructure

• Traefik v3.6 replaces Caddy on both cloud and self-hosted deployments
• Traefik watches Docker container health natively — routes only to healthy containers
• docker-rollout + Traefik = zero requests dropped during deploys (verified with health loop test)
• All Caddy references removed from codebase, docs, and handbook

Dashboard

• API key creation dialog stays open after key is generated — user can copy the key before it closes

Legal

• Terms of Service — added: force majeure, termination (for cause/convenience), confidentiality (mutual NDA), warranty disclaimer (AS IS), liability carve-outs for German BGB (gross negligence), mutual indemnification, dispute resolution, severability
• DPA — added: SCC 2021 version + supplementary measures, sub-processor objection rights with termination option, breach notification follow-up (7-day reports), data subject rights SLA, audit rights detail, data export before deletion, binding effect clause
• Sub-processors corrected — only Aira-managed keys (OpenAI, Anthropic, Google) are our sub-processors. BYOK providers (xAI, DeepSeek, Mistral, etc.) are the customer's responsibility.
• Security page — new page at docs.airaproof.com/docs/guides/security

Self-Hosted

• Installer now creates upgrade.sh, backup.sh, uninstall.sh on the server (were missing before)
• Upgrade verified end-to-end: ./upgrade.sh with zero downtime

Docs

• Handbook: monthly release cadence (last Friday of every month)
• Performance benchmarks on landing page (6 stats, animated)

v3.5.1 — June 5, 2026

Highlights

• One-command self-hosted installer — curl -sSL https://get.airaproof.com/install.sh | bash. Auto-generates secrets, configures HTTPS via Traefik, creates admin account.
• Notifications — mark-as-read on notification click, full notifications page, mark all as read. Badge shows unread count.
• Interactive API docs — Swagger UI and ReDoc enabled at /docs and /redoc on all deployments.
• 9 new API reference pages — settlements, drift, models, SSO, reputation, notifications, credentials, API keys, approvers. All 127+ endpoints now documented.

API

• POST /notifications/mark-read — mark specific notifications as read (JWT auth)
• POST /notifications/mark-all-read — mark all pending as read (JWT auth)
• GET /notifications/pending — now returns id, notification_key, read, unread_count
• OpenAI SDK upgraded to v2.x (backward-compatible — no API changes)
• Swagger UI (/docs) and ReDoc (/redoc) now available in production

Dashboard

• Notifications page at /dashboard/notifications — table view with mark read
• Notification bell shows unread count, click marks as read and navigates
• Chat model selector: fixed empty dropdown during model loading
• Models preferences: "No key" indicator, enable/disable all, max 3 for consensus
• Cases creation: max 3 models enforced in UI
• Login/register pages: social login buttons hidden in self-hosted mode

SDKs

• Python (pip install aira-sdk==3.5.1): Fix sanitize_file() crash (was using non-existent self._session). Pin framework integration upper bounds. PyPI
• TypeScript (npm install aira-sdk@3.5.1): Upgrade vitest 4.x, TypeScript 5.9, Node engine >=22. npm

Infrastructure

• Zero-downtime deploys — all services use docker-rollout. New containers start and pass health checks before old ones are removed. No request is dropped.
• PostgreSQL 16 → 17
• Python 3.12 → 3.13
• Node.js 20 → 22
• OpenAI SDK 1.x → 2.x
• All framework integration deps pinned with upper bounds
• /metrics requires admin key (was open when key not set)
• Admin endpoints return 404 instead of 403 on auth failure

Self-Hosted

• One-command installer with auto-TLS, admin account creation, and version pinning
• Zero-downtime upgrades — ./upgrade.sh uses docker-rollout for API and frontend
• Single-domain architecture — Traefik routes /api/v1/* to backend, /api/auth/* to frontend, /* to frontend
• Frontend uses relative URLs — no build-time API URL baking needed
• upgrade.sh accepts version arg: ./upgrade.sh v3.5.1
• backup.sh with 14-backup rotation
• Social login buttons hidden by default (enable via env vars)
• Server specs: 8 GB RAM / 4 vCPU minimum, 16 GB / 8 vCPU recommended

Docs

• 35 API reference pages (was 26) — every endpoint documented
• Self-hosted guide rewritten for one-command installer
• API reference index: complete endpoint overview table
• Interactive docs links: Swagger, ReDoc, OpenAPI spec

v3.5.0 — June 4, 2026

SDKs

• 15 new methods each on Python Aira / AsyncAira and TypeScript Aira: sanitize, webhooks, usage, models, policy lifecycle
• Gateway config helpers: gateway_openai_kwargs() / gatewayOpenAIConfig()
• Python SDK on PyPI · TypeScript SDK on npm

v3.1.0 — April 14, 2026

DORA Compliance

• Full EU Digital Operational Resilience Act support (Articles 17–19, 24–27, 28–44)
• 12 new SDK methods: incidents, third-party register, resilience tests
• Signed major-incident PDF reports
• Dashboard: incident management, third-party register, test log
• DORA guide · API reference

Earlier Releases

The platform shipped its foundational features before formal versioning:

• EU AI Act — Article 12 logging, Article 9 risk categories, Article 6 right-to-explanation, Annex IV technical documentation
• Cryptographic receipts — Ed25519 signatures, RFC 3161 timestamps, Merkle settlements
• Multi-model consensus — parallel execution, structured output, disagreement scoring, human review
• Agent governance — DID identity, drift detection, reputation, verifiable credentials, agent estate
• Content scanning — PII/PHI detection, DICOM de-identification, tokenization
• Evidence & compliance — sealed evidence packages, compliance bundles, time-travel queries
• Gateway — transparent LLM proxy with policy enforcement
• Escrow — liability ledger for high-stakes operations

See the changelog for detailed entries.