Changelog

Prism issued today

• Version 3.0.0, built on 2026-10-03.
• Template sha256 fingerprint: 33c1efcc01329c171095b062a11f106e42c61736c01a94b0ac1ad684eca3d239, published and signed in the release statement; bouraq-verify.py prism checks that a personalised copy is this code, byte for byte.
• QR code format: XQ3, unchanged since version 3.0.0.

October 2026: governance and organisations

• Organisations on the shared service: their own administrators, seats, transfer policy, approvals, audit-trail export and access review.
• Four-eyes approval: every decision is signed with the approver's password, and code when they have a second factor.
• A signed (Ed25519) receipt for every delivered file, verifiable offline with the public key; a standalone verification script.
• Authorisation on file, named and revocable devices, allowed file types, directions authorised separately.
• Delete after download, full data export and self-service account closure.
• Second factor (TOTP), including for the command line (--otp).

October 2026: Prism

• Under each code: the account and the first characters of the file's fingerprint, so an authorised transfer is recognisable on screen.
• Signed releases; send-only copies when the way back is not authorised.
• Filters to skip files over 1 MB and binaries; error correction fixed, no longer a setting.

October 2026: security fixes

An internal security review fixed twenty points, each with a regression test:

• sign-in throttling that holds under parallel attempts; bounded request sizes; protection against malicious compressed files;
• security headers on every response (HSTS, CSP, protection against framing);
• server files created with restricted access; limits on pending space; dangerous folder names refused on the way back;
• administrator accounts created or promoted are recorded in the audit trail.

Report a vulnerability: security.txt.