What's new

What changed, for the people using Enclave. Newest first. Every bullet is something you can see or do; a bullet that starts with Fixed is a repair.

0.7.0 — Chat, and messages nobody else can read

8 September 2026

• Channels. Your organization has one for everybody, one for every team, one for every project — and anyone who can manage teams can start more. Every message is kept as part of your organization's own record, the same as everything else here.
• Direct messages. Message anyone by their email or handle. If you don't already share an organization, they get a request first and nothing more is delivered until they accept. Every direct message is encrypted — nobody on our side can read them, ever.
• Blocking. Block anyone, quietly. They're never told.

0.6.0 — Projects, a calendar, clients, and achievements

8 September 2026

• Projects and tasks. Give a project a board — to do, in progress, done — or a plain list, whichever you'd rather look at. Tasks carry a priority, a due date, one level of subtasks, and comments; mention someone with @theirname and they're told, once.
• A calendar. Events for the whole organization or just one team. RSVP with a tap, and check in within two hours of the event to record who actually showed up — separate from who said they would.
• Clients. A new kind of guest: assigned to specific projects one at a time, seeing exactly those and nothing else about your organization. They read everything inside an assigned project and can work the tasks that are theirs.
• Achievements. Define your own — a name, an icon, a colour — and award them by hand with a reason, or set a rule (attend events, write documents, finish tasks, stick around long enough) and let them award themselves automatically. They show on a person's profile and in the member list.
• Fixed: entering an organization as a client sent everyone to a desktop clients were never allowed to open; it now opens the client's own project list instead.

0.5.0 — A knowledge base, files, and four small tools

7 September 2026

• A knowledge base. Write documents made of sections — a title and a body each — with every past version kept and restorable, and search that points straight at the section that matched.
• Files. Folders, a trash that holds for 30 days, a personal "My files" alongside the organization's shared files, and a storage meter that shows what your plan allows.
• Notepad. Personal notes in Markdown, with code blocks highlighted, bare links made clickable, [[Title]] linking to another of your notes or a knowledge-base document, and @name telling somebody they were mentioned — once, even if you keep editing. "Publish" turns a note into a knowledge-base document without deleting the note.
• Calculator. A history of every expression you've evaluated, kept across every organization you're in, up to your last 200.
• Draw. A blank canvas, six colours, three widths, undo — saved straight into Files › Drawings. No script available yet? Upload a picture instead, from the very same page.
• Setup, for new members and, separately, for new clients — an organization writes a short set of welcome slides, shown once on the way in, reopenable afterwards from the desktop for anyone who skipped it.
• Fixed: a plain member could see Sticky Notes on the desktop but could not write, edit or remove one — the write routes asked for a permission a member is never given.

0.4.0 — Staff support, on the record

7 September 2026

• If a staff member ever signs in to help you, you'll know. An e-mail the moment it starts and the moment it ends, a banner the whole time it runs, and a full record on your Activity page — every page they opened, in order, with the reason they gave. It ends on its own after thirty minutes if nobody stops it sooner, and it can never touch your account settings or your sticky notes.

0.3.0 — Teams, Feed, Sticky Notes, your own words

7 September 2026

• Teams. Group people into boundaries — a team's page is visible to whoever is on it, or to whoever manages teams for the whole organization. Adding or removing somebody is on the record.
• Feed, on the organization's own page and on every team's. Anyone posts; you can always remove your own; a moderator can remove anyone's and pin one post to the top.
• Sticky Notes, on the desktop. Short notes in six colours, up to 30 per person — yours alone, nobody else's business.
• Rename what everybody sees. Under System Settings › Language, change any word the interface uses, per language — "Projects" can become "Jobs", "Clients" can become "Patients" — and it applies everywhere your organization is shown, including in e-mails. Export and import a whole vocabulary as one file.

0.2.0 — Log, notify, search

7 September 2026

• A System Log for the organization. Every change an owner, admin or auditor is allowed to see — who did what, and to what — with a page per entry showing the setting, its previous value and its new one. Click any row to open it.
• My Activity, across every organization you're in. Joining, leaving, a role change done to you, and your own sign-ins, merged into one timeline — plus a link straight to each organization's System Log where you're allowed to see it.
• Notifications, with a bell in the bar, an inbox page you can filter by kind and by read or unread, and a page in Preferences to choose which kinds e-mail you immediately, once a day, or not at all.
• Search, in the organization switcher on every page — find a person by name, e-mail or role. Type type:people to narrow, or before:/after: a date.
• Notes on a person, for admins. A "Details" link on the People page opens notes you can leave for your own reference, and a link to that person's activity in your organization.
• Fixed: a colleague's profile rendered like a broken link instead of their profile.
• Fixed: the top of every page sat flush against the navigation bar with no room to breathe.
• Fixed: every page now ends with a footer instead of stopping abruptly.
• Fixed: the settings sidebar, grown to sixteen links, is now grouped into Personal, Configuration, Security and Documentation, each collapsible.
• Fixed: every on/off switch could shrink to nearly nothing next to a long label; it now holds a minimum width.

0.1.0 — Organizations

7 September 2026

• Make an organization, or join one. After signing in you choose where you're working — one tile per organization you belong to, exactly like a computer's own user picker — and can start a new one in a few seconds.
• Six roles, written out plainly. Owner, Admin, Manager, Member, Auditor and Client each have a fixed, visible list of what they can do. Nobody discovers what a role means by testing it.
• Invite people, and see who's waiting. An invitation holds a seat until it's accepted, declined, or expires — so your plan's limit means what it says.
• Apps, switched on or off, or opened only to people you name. Every organization has a page listing what it runs today and what's coming, with a switch for each and a way to hand one to specific people without opening it to everyone.
• Switch organizations from the bar, not just the picker page — your other organizations and a "New organization" button, one click from wherever you are.
• Hand the organization to somebody else. An owner can offer it to another member; they have seven days to accept, either side can call it off before then, and the person receiving it needs an authenticator app or a passkey set up first, because the owner is the one role a sign-in link alone must not be enough to reach. Both sides get an e-mail the moment it's done.
• Fixed: every on/off switch in the interface — the ones on the Apps page included — was rendering as a plain checkbox rather than the pill it was designed as, in every browser most people use.

0.0.9 — Verification

6 September 2026

• Get verified, and wear the check. Send your identity document and your tax details, pay ten dollars once, and a person reads them. Approved, and a check appears beside your name wherever your name appears.
• A person reads it, not a machine. That is what the fee is for. It is not a revenue line — it is what keeps the queue short enough to be read properly, which is why it is not refundable either way.
• Your documents are encrypted, not merely hidden. Your name, tax number and address are ciphertext in the database. Your photographs are ciphertext on disk — not just outside the public folder — and they are streamed to you through a page that checks it is you. There is no address that reaches them.
• They are deleted thirty days after the decision, whichever way it went. That is a scheduled job, not somebody remembering.
• A refusal has to say why, so you can fix it and send another. Being turned down once is not being shut out.
• Verification lasts two years, and the check disappears on its own when it runs out. A badge that once meant something and now means nothing is worse than no badge.

0.0.8 — Settings, and the door out

6 September 2026

• Appearance. Light, dark, or whatever your computer is set to — which is the default, because it is the only answer that is right without asking. Text at 90, 100, 115 or 150%, every one of which the interface is checked at.
• Preferences. Language, time zone, and which day your weeks start on. Chinese and Thai are listed as coming rather than offered, because a language you can pick and not read is worse than one that is not there.
• See who has been reading your page. How many people looked over the last 7, 30 and 90 days. Seeing who is one of the things verification is for.
• Browse privately. Your visits still count — the person whose page it is still learns somebody read it, which is what they wanted to know — but they see “Someone”. Turning it off later does not reveal visits you made while it was on.
• Delete your account, without asking anyone. Type your address and it is gone: your page, your pictures, your sessions, every record of who read your page and every record of you reading anyone else's. What is kept is one line saying an account was deleted, with no name on it.

0.0.7 — A page of your own

6 September 2026

• Pick a handle and you have a page. It lives at /people/your.handle, with a picture, a banner, a headline, and up to a thousand characters about you in Markdown. Until you pick one you have no page — not an empty one.
• Nothing on it is shown by default. A new account is invisible. You decide who can see your page, and separately who can see each way of reaching you: your phone to some people, your website to anyone, your sign-in address to nobody. No profile here is ever public to the internet, and there is no setting that would make one so.
• It shows what time it is where you are, which is the most useful thing on it for anybody deciding whether to write to you right now.
• Changing your handle does not break the links people wrote. The old one keeps working for ninety days, and nobody else can take it in the meantime.
• Your photographs do not carry your address. Every picture is rebuilt when it arrives, which removes the location a phone writes into a photo.

0.0.6 — Your face, your fingerprint, your key

6 September 2026

• Sign in with a passkey. Add one under Security and the sign-in screen gains a button: your face, your fingerprint, or a security key, and you are in. No link to wait for, no code to type — a passkey already proves both that you have the device and that you unlocked it.
• It cannot be phished. A passkey only works on this site. A convincing copy of our sign-in page on another address gets nothing from it, however good the copy is.
• Name them, see them, remove them. Each passkey is listed under Security with when it was last used, and any of them can be removed.

0.0.5 — Everywhere you are signed in

6 September 2026

• See every browser you are signed in on. Under Security: which browser, where from, when it was last active, and which one you are reading this on.
• Sign one out, or all of them. Ending a session ends it — that browser is asked to sign in again from scratch. "Sign out everywhere else" ends all the others and, importantly, takes back every browser's permission to skip the second factor, which is the thing you actually want when you have lost a laptop.
• Take back trust from one browser without signing it out, if you would rather it just asked for a code next time.
• Fixed. Signing a browser out did not really sign it out: a "stay signed in" cookie let it straight back in with a new session. There is no such cookie any more — your session itself now lasts thirty days, so you stay signed in the same way, and signing out means what it says.

0.0.4 — Your authenticator app

6 September 2026

• Sign in with an authenticator app. Set one up under Security: scan the code, type what it shows, done. From then on signing in on a new browser asks for the six digits on your phone and sends you no e-mail at all — the secret is already on the device you are holding.
• Eight recovery codes, for when you do not have your phone. Each works once and is spent when you use it. You can ask for eight new ones at any time, which stops the old eight working.
• You choose which one we ask for. If you have both an app and a recovery address, we ask for the app, because a secret on a phone is harder to reach than an inbox. You can say otherwise under Security, and you can switch between them on the sign-in screen itself when the phone is flat.

0.0.3 — A second lock, on a second door

6 September 2026

• A recovery address, and a code when you need one. Add a second e-mail address under Security. Once you confirm it, signing in on a browser you have not used before asks for a six-digit code sent there — deliberately not to the inbox that just received your sign-in link, because a second code to the same inbox proves nothing twice.
• Browsers you trust stay trusted. Tick the box and that browser stops asking for a code for sixty days. You can see every trusted browser under Security, and take any of them back.
• The log now covers more than sign-ins. A recovery address added, a wrong code typed, an address removed — all of it, in the order it happened, so you can see somebody trying rather than only somebody succeeding.
• Nobody gets halfway in. Between the link and the code you are not signed in at all: every other page still treats you as a stranger.

0.0.2 — A way in

6 September 2026

• Signing in, with no password to forget. Type your e-mail address and we send you a link. Opening it signs you in — and creates your account if you do not have one, because signing up and signing in are the same door. The link works once and expires after fifteen minutes.
• Nothing to reset, phish or leak. There is no password field anywhere in Enclave, and no password stored anywhere in it.
• A record of every way in. Under Security you will find every sign-in: when, from where, and through which door. It is written once and cannot be edited, including by us.
• Fixed. The design kit's dropdowns and panels were invisibly covering the page: sidebar links did nothing and clicking empty space changed the theme.

0.0.1 — The first screens

6 September 2026

• A design system you can look at. Every part of the interface is on one page at UI kit — buttons, fields, tables, charts, dialogs, drawers, icons — shown next to the markup that made it, so what you see in the product is what was checked before it got there.
• Eleven themes, and a way to build your own. Open Theme in the bar and the whole interface changes as you choose: light, dark, City Lights, Barbie, Teal, Navy, Shoji, Sand, macOS, GNOME, Windows. Corner roundness, border weight, shadow depth, spacing and the typeface are yours to set too, and you can edit any of the twelve colours directly.
• It reads at any size. Text scales to 150% without anything overlapping, and every screen works on a phone, in a narrow window and on a desktop.
• Install it like an app. Add Enclave to your home screen or dock from your browser's menu. It opens without browser furniture.
• It follows your system. If your computer is set to dark, Enclave is dark when it opens — no flash of white on the way in.