Changelog
Product updates and improvements to the Overrule platform.
v1.1FeatureJuly 12, 2026
Toxicity Detection, REDACT Action, Webhooks
- Streaming interception — guard.stream() with token-by-token policy evaluation
- LangChain integration — OverruleCallback for drop-in governance on any chain/agent
- Dead-letter queue — failed events persisted to disk, auto-recovered on next startup
- New built-in policy: toxicity-detection (profanity, slurs, violence, dangerous instructions)
- REDACT policy action — violations are replaced with tokens instead of blocking the response
- Policy hot-reload — update policies at runtime without restarting
- Webhook notifications — HMAC-SHA256 signed POST to your endpoint on high-severity violations
- Credit card detection now matches dash/space-separated formats
- 137 tests passing (up from 78)
v1.0MajorJuly 12, 2026
Public Launch
- Open-source Python SDK on PyPI
- Cloud dashboard with real-time event streaming
- 2 built-in policies: PII detection (7 patterns) and injection detection (8 prompt + 5 SQL patterns)
- Custom policy engine via BasePolicy subclass
- Fail-open architecture — governance never becomes an outage
- Circuit breaker + exponential backoff for production resilience
- Razorpay billing with Starter ($39/mo) and Team ($149/mo) plans
- EU AI Act compliance mapping (Articles 13, 14, 15)
- Google OAuth with Supabase Auth
- Admin dashboard with revenue metrics and user management
v0.9SecurityJuly 10, 2026
Security Hardening
- IDOR prevention — all queries scoped by user_id
- Subscription ownership verification on plan activation
- UTC-normalized quota periods preventing timezone bypass
- Rate limiter memory leak fix (removed setInterval in serverless)
- Violations data isolation — users only see their own data
- Empty customer ID guard on webhook handlers
v0.8FeatureJuly 8, 2026
Dashboard & Billing
- Real-time governance posture dashboard
- 7-day activity chart with daily breakdown
- Critical violations panel with severity badges
- Policy effectiveness scoring
- API key management (create, revoke, last-used tracking)
- Razorpay subscription checkout flow
- Webhook-driven plan activation
- Usage quota tracking with period-aware billing
v0.7FeatureJuly 5, 2026
Event Pipeline
- Structured event capture for every governed LLM call
- Async event streaming to Supabase
- Retry with exponential backoff for failed event deliveries
- Bounded buffer with backpressure handling
- Event filtering and search in dashboard
- Latency tracking per request
v0.6CoreJuly 1, 2026
Policy Engine
- Pluggable policy architecture
- PII detection: credit cards, SSN, email, phone, IBAN, passport
- Prompt injection detection: 8 attack patterns
- SQL injection detection: 5 patterns
- Custom policy support via Python BasePolicy class
- Policy chaining with configurable actions (log, block, warn, redact)