2026-07-05 Mobile navigation, a proper sign-out, and a tighter admin console
- The site now has a working menu on phones and small screens — tap the menu button to reach every page and the sign-in / apply buttons, instead of the nav vanishing below a certain width.
- Sign out now fully ends your session: it clears the sign-in cookie so the next visit asks you to sign in again, rather than quietly signing you straight back in.
- The admin console is now locked to administrators end to end — an engineer who is only pending approval, or who is not an admin, no longer sees the kill switch or the engineer roster at all (previously those were only hidden, not withheld).
2026-07-03 Multi-inverter sites, safer writes, and a simpler way in
- Sentinel now finds and monitors every inverter on a site, not just the first — it keeps searching the network for more even after it connects to one, so multi-inverter and plant setups are read in full.
- Writes to an inverter setting are now rate-limited to protect the hardware from wear, and the sleep control changes only the sleep state without touching other flags.
- New customer page: your installer can send you a single link to download Sentinel, run it and read them the code — with a plain-English explanation of why it stays read-only and in your control.
- Clearer access for installers: apply and sign in to join the approval queue, with the read window (6 hours) and write window (15 minutes) now spelled out in the app.
- The engineer dashboard now shows a clear banner the whole time write access is switched on — with a live countdown of the time left — so it is always obvious when changes are possible, mirroring the read-access banner.
- The desktop and mobile apps now switch straight back to "waiting for an engineer" the moment the engineer disconnects, instead of staying on "engineer connected" until the session ends.
- Connecting is smoother: live data now appears the instant you open the dashboard — even when the customer allowed access before you connected — and a reconnect after a short break quietly re-authenticates instead of dead-ending on "sign in required".
- Admin console: an engineer can now be removed from the roster entirely (not just disabled) — their access is revoked immediately and the removal is itself recorded, while their past audit history is preserved. The Approve/Disable actions, which were failing to reach the backend, are fixed too.
2026-07-02 Security hardening + admin console
- Ran a full security review of the sign-in, audit-log and admin paths and closed everything it found — including making sure hostile data from a paired system can never run code in the engineer dashboard.
- Sign-in tokens now travel in a request header instead of the URL, so they never land in server logs; sessions have a hard renewal cap, and there is now a Sign out control.
- Admin console: approve or disable engineers, see connected and recent systems, search the full fleet changelog, and permanently erase all data for one system (for example a test rig) — every erasure is itself recorded.
2026-07-01 Engineer sign-in + permanent audit log of every write
- Engineers now sign in with their approved work email, secured by Cloudflare Access. There is no open signup — Ron approves each installer and can disable an account at any time from an admin console.
- Every remote change is now recorded to a permanent, append-only, hash-chained audit log before the command reaches the inverter, keyed to the signed-in engineer and the system it targets.
- The write path is fail-closed: if a change can't be written to the log, the write is refused. No log, no write.
2026-06 History tab
- Added a persistent history view to the engineer dashboard: scrub back through power flow, battery, solar and grid over time to see what a system was doing when a fault hit.
- Per-cell battery voltages retained in the rolling diagnostic window so you can spot cell imbalance without being on the system at the moment it drifts.
2026-06 Multi-inverter discovery
- The local agent now discovers and lists multiple GivEnergy inverters on the same network automatically, so multi-unit and three-phase sites pair once and surface every unit.
- Each discovered unit is labelled by model and serial in the dashboard picker.
2026-06 EMS visibility
- Surfaced Energy Management System state (modes, charge/discharge windows, target SoC) read-only in the dashboard, so you can confirm how a system is configured before touching anything.
2026-06 Write allowlist + on-device consent
- Hardened the write path: only an explicit allowlist of registers can ever be written, and only during a customer-armed access window after on-device “Allow”.
- Every attempted and completed write is now recorded to a permanent, tamper-evident audit log that no engineer can alter or delete.
2026-05 Desktop apps (beta)
- Shipped ad-hoc-signed Mac (universal) and Windows (64-bit) desktop builds — the current way approved engineers run Sentinel.
- Six-character ephemeral pairing over a Cloudflare relay: no inbound ports, encrypted outbound only.
- iOS and Android apps entered development toward App Store / Play Store review.
