Provenance — Release notes

2.0.2

Aug 2026

Move a project, restore it, copy it to another disk — the record follows.

New

·Restore from Backup. Recover a project from its verified backup without leaving Provenance. The copy lands beside your project; the one you have open is never touched.

Improved

·The growth graph is there when the window is. It was waiting behind a full walk of your git history and a word count of every file, neither of which it needs — its numbers were already on disk.

·When the record and the files disagree, it says which entry. What was recorded, what is present, and when this Mac last saw them agree. It does not call you a forger.

·A write that can’t happen says so. Nine places used to fail in silence when the project folder was unreachable.

Fixed

·Provenance opens after an update. A titlebar header was being fitted to every window the app had open, including the What’s New sheet, which cannot take one. It only ever showed itself on the launch after a version change, which is why it survived this long.

·Restoring a backup no longer reports your record as altered. It said so permanently, on every launch, with no way to answer it — at the exact moment you most needed the app to vouch for your work. A move, a rename, a restore and a copy to another disk are recognised for what they are.

·“Start the record again from here” works, and keeps the old chain. It used to delete the evidence and leave the record still reading as broken.

·A backup can’t be refused forever because you renamed the project’s folder using different capitals.

2.0.1

Jul 2026

Feedback lives inside the version view, and off-script AI returns get rescued.

New

·Feedback in the version view. Open any version and a Notes toggle pins each received note under the passage it's about, with a live verdict: Addressed (with the before and after), Open, or honestly “couldn't find this passage.” A running score recomputes as you move between versions.

·Off-script AI feedback gets rescued. If a reviewer ignores the review page's embedded instructions and sends back a hand-made page, dropping it on Provenance imports it anyway: verbatim quotes become anchored notes, and the version is found by matching them into history.

Improved

·Review pages leave less room for AI improvisation. The invisible instructions now carry a copy-this-exactly skeleton with the stamp already filled in, plus a mandatory file-naming rule, so a model's laziest path is the compliant one.

·Sent means feedback/sent, here too. Requesting feedback files the review page into the project's own feedback/sent folder and reveals it in Finder, exactly like Draught, instead of asking where to save it.

Fixed

·A crash can't double the record. If the app was killed between writing a ledger event and remembering it had, the next launch could record the same feedback or check-in twice; the scanners now recognize their own prior work and never re-append.

·Feedback pairing works across both apps. A review page's invisible stamp is matched regardless of which app wrote it, so Draught-originated requests resolve in Provenance's views, and vice versa.

·Hidden files can't hide your work. iCloud sometimes marks synced files as hidden; every scanner in the app now sees them anyway, while still never walking git internals.

2.0.0

Jul 2026

A calmer look, one weighted ledger, and a safe copy of your whole project.

New

·Weighted ledger. A run of saves collapses into one session entry, named for the file it touched, with a grid of times and word changes underneath.

·Three roles. Every tracked file is a Manuscript, a Source, or an Artifact. The role is what the ledger records; format is read from the file.

·Whole-project backup. Point at a folder and Provenance mirrors the project automatically, verifying after each sync. Remove it any time without deleting the copy.

·Process Record. A shareable summary of how the work was made — sessions, span, density, and verification — one click from the timeline.

·Capture panel. One Add surface: type a check-in, or drop a file as an artifact or source. Import and triage move to the Inbox.

·Feedback, end to end. Request a clean reading page from any version — a reviewer comments offline with nothing installed and returns one small file. Provenance logs their notes against the exact version that answered them.

Improved

·Unified header. A project switcher replaces the tabs and title; the process summary sits in the titlebar.

·Centered timeline. The ledger reads down a calm central column, capped at both ends.

·Native menus. System menus everywhere, flat unified ground, search moved to ⌘F.

·Honest placement. An old file imported today lands at today; its artifact shows both created and imported dates.

Fixed

·Arrival no longer logs a ledger event. Importing a manuscript is triage, not a recorded moment.

·“Project connected” shows a real date. instead of a null value.

·Backup no longer accumulates numbered folders. — the swap replaces the prior copy in place.

1.0.2

Jun 2026

Stronger, calmer integrity.

New

·Stronger tamper detection. The integrity check now compares full commit identities, so a rewritten or pruned history can’t slip past verification.

·Crash-safe ledger. The hash-chained ledger now heals a save that was interrupted mid-write, instead of reading as tampered.

·Rollback witness. Provenance keeps a private, on-device high-water mark, so quietly rolling history back is caught — no network, ever.

1.0.1

Jun 2026

Runs anywhere, no setup.

Fixed

·No developer tools needed. Version history now works on any Mac out of the box. Provenance no longer relies on the command-line git that only ships with Xcode.

1.0.0

Jun 2026

Welcome to Provenance.

New

·Tamper-evident ledger. Every save, source, and check-in is hashed into a chain that detects after-the-fact edits.

·Process Records. Export an HTML or PDF report that walks a reader through how a piece of work came to be.

·Paste sources, when you want them. Paste text in and log where it came from — always by hand, never automatic.