Changelog

SDK security hardening release. v2.4.0 ships X3DH-style key exchange (X25519 + Ed25519, signed pre-keys, one-time pre-keys), strict server-parity tested SHA-256 + canonical JSON hashing, audited cryptographic primitives, and fixes for several edge cases in the encryption/decryption flow. Drop-in upgrade from v2.3.x — no breaking API changes.

• X3DH key exchange: X25519 (key agreement) + Ed25519 (signatures), with signed pre-keys and one-time pre-keys for forward secrecy
• AES-256-GCM with PBKDF2 (100,000 iterations) for client-side encryption
• SHA-256 hashing with canonical JSON, server-parity tested so the hash you compute locally matches the hash the API computes — byte-for-byte
• Crypto primitives via the audited @noble/curves library

• npm install @anchora/sdk
• Public package: npmjs.com/package/@anchora/sdk

• No breaking changes for callers of anchor(), verify(), getProof()
• New optional KeyManager API for X3DH key bundles (backup, recover, rotate)
• TypeScript types regenerated; tighter literal types on chainType and record status

Anchor records to public, private, or both chains in one API call. Anchora now supports Polygon (EVM), Hyperledger Fabric (private, BYO), and Hybrid mode — same Merkle root committed to both chains with independent verification. Existing customers see zero breaking changes; new fields are additive.

• Four anchoring strategies: Public (Polygon), Private (Fabric BYO), Hybrid (both), Custom (any EVM RPC or Fabric profile)
• Hyperledger Fabric integration via fabric-gateway SDK with auto-deployed anchora-anchor chaincode
• Dual-anchor: same Merkle root committed to your Fabric channel AND Polygon in a single batch — one webhook, two independent attestations
• Strategy is project-level Settings; switch without changing application code

• Dual-anchor retry: if secondary chain fails, worker retries hourly up to 5 attempts; primary anchor stands
• X.509 cert expiry monitoring with email alerts at 30 / 7 / 1 days before expiry
• AES-256-GCM encryption for Fabric private keys + connection profiles at rest
• Atomic Redis LPOP queue consume — no duplicate batches under concurrent workers

• Webhook payload includes chainType, networkId, and a dualAnchor sub-object for Hybrid records
• New headers: X-Anchora-Chain and X-Anchora-Network
• /v1/verify returns independent verification verdicts for primary and secondary chains
• For Fabric records: blockNumber is explicit null (fabric-gateway constraint), transactionHash is raw txID, batchId is a string
• SDK @anchora/sdk v2.3.0 with TypeScript types for all new fields

• 4 new docs pages: Multi-Chain Anchoring, Anchoring Strategies, Fabric Setup (BYO), Hybrid Mode Guide
• 3 new blog posts on multi-chain architecture, Fabric vs Polygon comparison, and the dual-anchor pattern
• Landing page rebuilt around multi-chain story with industry-specific use cases

• API docs aligned with /v1 core reference: base URL https://api.anchora.co.in/v1, Bearer token auth, MongoDB ObjectId record IDs, status enum tightened (QUEUED, BATCHING, ANCHORED, FAILED)
• New Key Management documentation page with 10 endpoints for E2E encryption key lifecycle (register, bundle, rotate, backup, recover, revoke, verify, audit)
• Encryption guide: standardized on AES-256-GCM-PBKDF2 (100,000 iterations); removed legacy AES-256-CBC
• GDPR delete API: moved X-Delete-Mode header to JSON body {"mode": "soft|hard"}
• Webhook payload format clarified: recordId, hash, status, exponential backoff retry (1s, 2s, 4s, 8s, 16s)
• New blog posts: Math behind end-to-end encryption, Blockchain certificates use case

• Added HIPAA compliance guide and documentation
• New batch operations API endpoint for bulk anchoring
• Improved Merkle tree batching performance (30s → 15s cycle time)
• Added webhook retry logic with exponential backoff

• Launched developer documentation portal
• Added GDPR compliance features (soft delete, hard delete, data export)
• Encryption guide with client-side and server-side examples
• Analytics dashboard API for tracking usage metrics
• Python SDK in development (coming soon)

• Initial public alpha release
• Core anchoring API: anchor(), verify(), getProof()
• JavaScript SDK published to npm (@anchora/sdk)
• Merkle tree batching: 256 records per transaction
• Polygon network support for low-cost anchoring
• AES-256-GCM encryption support
• Webhook notifications for anchor events