Changelog
What shipped on the StateSet platform. Updated as we release.
April 18, 2026 · Latest
Webhooks, audit trails, and Stripe correctness
- New Per-attempt webhook delivery history — expand any webhook row in
/dashboard/notifications to see every retry with status, duration, and error.
- New Webhook retries with 0s/1s/3s/10s backoff. 5xx retries silently; 4xx short-circuits.
- New Auto-disable after 5 consecutive failures (matches Stripe). Reactivate from the dashboard after fixing.
- New Test-delivery button per webhook endpoint. Signs the payload like production, marks the receipt in the delivery log.
- New Tenant audit log at
/dashboard/security with action + actor + resource filters.
- Improved Stripe webhook idempotency. Duplicate
evt_… retries return 200 without reprocessing.
- Security Integration tokens (Shopify) AES-256-GCM encrypted at rest with per-row nonces.
Earlier April 2026
Full self-serve path + metered billing
- New Public signup at
/signup — atomic workspace + Stripe customer + first API key in one call.
- New 4-step onboarding wizard (Workspace → Shopify → Vault key → Deploy ACP handler) with one-click OpenAI registration payload.
- New Stripe Meters API integration. GMV events metered per merchant, billed monthly.
- New Quota plans: Free ($0 / 500 events / 1 handler), Growth ($99 / 10k / 3), Scale ($499 / 100k / 10), Enterprise (unlimited).
- New Preemptive
meter.quota.warning webhooks at 90 / 95 / 100% — merchants can auto-upgrade before 429s hit.
- New Per-workspace API keys (
sks_…, 256-bit) with scoped permissions and SHA-256 hash-at-rest.
- New Stripe Customer Portal integration. Merchants manage cards, invoices, subscriptions without us building those surfaces.
- New Provisioning events —
provision.running and provision.failed webhooks fire when handlers come up or fail.
Platform foundations
Observability + ops
- New Prometheus
/metrics endpoint with 11 workspace + delivery gauges, optional bearer-token gate.
- New Public
/status page showing control-plane health in real time.
- New Admin summary at
/api/v1/admin/summary — every number you'd put in a weekly investor email, in one JSON.
- New Shopify OAuth with AES-256-GCM token storage; deployed ACP handlers auto-fetch their tokens from the control plane on boot.
- New Comprehensive API docs at
/docs. Full OpenAPI spec coming soon.
Following along? Claim a free workspace — 500 checkout events / month, no credit card.