Changelog

2026-05 — Current MVP readiness baseline

Onboarding and membership

• Phone-number + SMS OTP sign-in remains the only authentication flow.
• Accounts can belong to multiple organisations, with active-organisation switching in the mobile apps.
• Invitation links use https://app.semafore.io/join/{token} and are preserved through the sign-in flow.
• New device registrations remain approval-gated by organisation administrators.

Messaging

• One-to-one messaging, group messaging, and admin broadcasts are live.
• Delivery and read receipts are supported.
• Quick reply from notifications is supported.
• Each recipient device receives its own encrypted copy of each message.
• Push notifications carry routing identifiers only, never decrypted message content.

Security and retention

• Signal Protocol messaging is live with X3DH session establishment and Double Ratchet forward secrecy.
• Signed pre-key and one-time pre-key rotation is automatic.
• Organisation-level message and file retention is live, with expired content rendered as placeholders on mobile clients.

Administration and billing

• Organisation administrators can approve, deny, revoke, group-manage, and broadcast from the portal.
• Professional billing is available through Stripe, with a 30-day portal-started trial and GBP 9 per seat per month pricing up to 25 members.

2026-04 — Initial public docs baseline

• Public technical documentation site launched with security, admin, end-user, compliance, and release sections.
• End-to-end encrypted private messaging, group messaging, broadcasts, file transfer, and portal administration were documented as the initial live platform surface.