API Changelog

Version history, breaking changes, and migration guides for the Netallion AI Assurance API.

Versioning Policy

  • API Version: All endpoints are prefixed with /v1/. When breaking changes are required, a new version (/v2/) will be introduced.
  • Deprecation Timeline: Deprecated endpoints receive a 6-month sunset period. During this period, responses include a Sunset header and a Deprecation header with the deprecation date.
  • Breaking Changes: Changes to required fields, response shapes, or authentication are considered breaking. New optional fields, new endpoints, and new enum values are non-breaking.
  • Stability: The /v1/ API is stable. No breaking changes without a major version bump.
Latest

v1.4.0 — April 2026

  • ADDED /exports/sarif and /exports/cyclonedx endpoints for ASPM integration
  • ADDED /exports/webhook/configure and /exports/webhook/test for push-based export
  • ADDED /remediation/execute, /remediation/{id}/blast-radius, /remediation/{id}/rollback
  • ADDED GitLab MR enforcement endpoints under /integrations/gitlab/
  • ADDED Jira OAuth 2.0 (3LO) endpoints: connect, callback, projects, disconnect, webhook
  • ADDED Email notification preferences on /users/me/notification-preferences

v1.3.0 — March 2026

  • ADDED Executive dashboard endpoint /v1/executive/summary
  • ADDED Azure DevOps integration endpoints
  • ADDED SSO/OIDC transaction-based authentication flow
  • CHANGED /health/ready now checks all dependencies (Postgres, Service Bus, Storage, Key Vault)
  • CHANGED RBAC model expanded from 4-tier to 5-tier (added System role)

v1.2.0 — February 2026

  • ADDED NHI lifecycle management endpoints
  • ADDED Prompt DLP scanning and hygiene score endpoints
  • ADDED Honeytoken deployment and monitoring endpoints
  • ADDED BPE tokenization support in detection engine

v1.1.0 — January 2026

  • ADDED PR enforcement endpoints (GitHub webhook receiver, check runs)
  • ADDED Incident management (create, update, assign, resolve)
  • ADDED Workspace management and Azure Monitor connection
  • ADDED Assessment scanning and report generation

v1.0.0 — January 2026

  • ADDED Initial API release with authentication, tenant management, and user CRUD
  • ADDED Core detection engine with 176 patterns
  • ADDED Audit trail with hash-chain verification