AccessFlow changelog — every release, newest first
One entry per stable release, each with a permanent link you can share or bookmark. A self-hosted AccessFlow checks the small version.json file next to this page at most once a day and, when a newer stable release exists, turns the version under the sidebar logo into a link that lands on the matching entry below. Pre-release builds are listed on GitHub releases but never trigger that hint. Upgrade steps are in Install & first run.
v2.4.0 — Deployment approval governance
- Deployments are now a governed request, alongside queries and API calls. A CI/CD job asks AccessFlow for permission to release, an AI analysis scores the release metadata, reviewers decide in the web UI, and the pipeline blocks on a gate that only opens for an approved request.
- Pipelines and environments. Admins define pipelines for GitHub Actions, GitLab CI, Azure Pipelines, Jenkins, CircleCI, Bitbucket Pipelines or any generic runner, with ordered per-environment policies: required approvals, review-plan overrides and break-glass opt-in. Trigger and break-glass rights are granted per user or per group.
- Fail-closed release gate. The gate answers "not releasable" by default and opens only for an approved request with no active freeze window and a scheduled time that has passed. Any error or unknown request keeps the gate shut.
- Freeze windows — one-off or weekly recurring, org-wide, per pipeline or per environment — either hold releases or reject them at submission, and hold when a definition cannot be evaluated.
- Audited break-glass deployments need both an explicit grant and an environment that allows them, with no admin bypass and a mandatory retrospective review.
- Outcome reporting. After the deploy, the pipeline confirms execution and reports success, failure or rollback; a rollback on a review-required environment opens a follow-up review the submitter can never close.
- Native CI steps for GitHub Actions, GitLab CI and Azure Pipelines, plus a plain-curl walkthrough; notifications for every transition; an audit row for each state change; and a full web UI with a deployment list, detail page, reviewer queue, rollback worklist and pipeline administration with a copy-paste CI setup panel.
v2.3.0 — Data-aware governance and reviewer intelligence
- Automated sensitive-data discovery. An opt-in per-datasource scanner samples column data through the governed sampling path, detects e-mail addresses, card numbers, national IDs, IBANs and phone numbers locally (optionally with the org's AI provider) and proposes classification tags an admin confirms or dismisses.
- Approval-outcome prediction. A per-organization model trained only on that org's own human review decisions shows reviewers how likely a query is to be approved. Advisory only — it never routes or decides.
- Recurring approved queries with result subscriptions. Approve a query, its cadence and its expiry once; each occurrence then runs through the full proxy pipeline and delivers results by e-mail or chat. Submitters and reviewers can stop a series at any time.
- Least-privilege intelligence. Standing grants are scored as never used, stale, over-scoped or active from real usage, surfaced in recertification worklists and a new over-provisioned-access report. Nothing is revoked automatically.
- Reviewer delegation and escalation. Out-of-office delegates with full attribution on every decision, plus optional escalation and nudge reminders for idle reviews.
- Result-export governance and DLP. Per-datasource export policies allow, watermark, cap or deny result downloads; every export is signed and audited.
- SIEM and WORM audit streaming to Splunk HEC, syslog/CEF, signed HTTPS batches and S3 Object Lock. Streaming is additive: the tamper-evident audit log remains the record.
- SCIM 2.0 provisioning. Okta, Entra ID, Keycloak and other identity providers create, update and deactivate users and groups over SCIM, so offboarding in the IdP revokes access here immediately.
v2.2.0 — Enterprise operations
- External secrets managers. Datasource credentials resolve from HashiCorp Vault, AWS Secrets Manager or Azure Key Vault at connection time, with local encryption as the fallback and every resolve audited.
- High-volume proxy performance. Opt-in Redis-backed result caching for reads, batched inserts inside transaction envelopes, and multi-replica read load balancing with per-node health checks and primary failover.
- Backup, restore and disaster recovery. Helm backup and restore jobs, post-restore audit-chain verification, an AI provider fallback pool so analysis degrades to a local model when the primary is unreachable, and a documented runbook.
- ServiceNow and Jira ticketing. Tickets open automatically when a query is rejected, escalated or times out, link back to the request, and can sync a ticket resolution onto the pending decision.
v2.1.0 — API access governance, data lifecycle and reviewer productivity
- API access governance. The same submit → AI risk → review → execute pipeline now governs outbound REST, SOAP, GraphQL and gRPC calls: a connector catalog with schema ingestion, a schema-guided request builder, response masking, break-glass and text-to-API drafting.
- Masking, data classification and dynamic variables for API connectors — field, JSON-path, XML-path and regex masking with reveal scoping, classification tags that raise AI risk, and per-call computed values (signatures, nonces, timestamps) that are never persisted.
- Request chaining and grouping. Bundle ordered query and API-call members into one request with a single aggregated review.
- AI optimization and index recommendations, applied as a draft that goes through the normal review, and a dry-run sandbox that previews the execution plan and estimated impact without changing data — including scan-cost signals on cloud warehouses.
- Saved-query version history and diffing, real-time collaborative editing of a query in review, and immutable query snapshots with replay into a test datasource.
- Mobile-friendly approvals as an installable app with one-tap push, guarded by step-up authentication.
- Multi-model AI orchestration with voting strategies and pre-call guardrails, per-model cost and latency tracked.
- Data lifecycle manager with retention policies, right-to-erasure requests and proxy-enforced pseudonymization; access recertification campaigns with CSV evidence; group-based access grants; and a personalized dashboard with an optional weekly digest.
v2.0.0 — Beyond relational databases
- MongoDB, Couchbase and Redis governance through on-demand engine plugins: classification onto the standard approval workflow, row-level security, field masking and schema introspection for document and key-value stores.
- Text-to-query for NoSQL. A natural-language prompt drafts the engine's native query, still submitted through the full review pipeline.
- Behavioral anomaly detection. Rolling per-user baselines built from audit metadata flag out-of-pattern activity, escalate the user's next query and fan out notifications.
- Break-glass emergency access with instant admin fan-out, a prominent audit row and a mandatory retrospective review.
- Multi-tenant organizations with per-org quotas, a platform-admin console and a disable switch that blocks an org immediately.
- Data classification tagging for tables and columns; tagging derives masking and raises AI risk.
- Compliance reports and signed exports over the forensic query record, with a dedicated read-only auditor role.
- Terraform / OpenTofu provider and CI templates for declarative configuration, and OpenTelemetry tracing with Prometheus metrics and ready-made Grafana dashboards.
- Expanded MCP agent toolset — parse-only validation, governed column samples and the caller's own audit trail.
v1.4.0 — AI enhancements
- OpenAI-compatible and Hugging Face providers. Point the OpenAI adapter at any compatible endpoint, or use the Hugging Face inference router out of the box.
- Editable analyzer prompts per AI configuration, with the default template shown in the admin UI.
- Langfuse integration for per-org call tracing and managed prompts.
- Text-to-SQL — draft SQL from a plain-language prompt, still reviewed like any other query.
- RAG knowledge base. Attach documents to an AI configuration so risk analysis and drafting can cite your own schema notes and policies.
v1.3.0 — Fine-grained access control and data protection
- Just-in-time access requests. Users request temporary, scoped access that is granted on approval and revoked automatically on expiry.
- Policy-as-code routing. Attribute-based rules auto-approve, auto-reject, require extra approvers or escalate based on query type, tables, AI risk, role, group and time of day — and on client context such as source network and CI origin, failing closed when context is missing.
- Row-level security policies injected at the query layer so each user sees only the rows they are authorized for.
- Dynamic data masking per column — full, partial, hash, e-mail and format-preserving strategies with role- and group-based reveal.
v1.2.0 — Integrations and reviewer experience
- Reviewer groups and scoping — user groups, per-datasource reviewer assignment and SSO group mapping so teams only see the queues they own.
- Read-replica routing sends reads to a replica and keeps writes on the primary.
- Query result diffing between repeated runs of the same query.
- Approve or reject from Slack via an interactive Slack app, and a PagerDuty channel for critical-risk and review-timeout events.
- Query templates library shared across the team, and a datasource health dashboard with pool statistics, query volume and latency.
v1.1.0 — Productivity and operations polish
- Database drivers download on demand the first time an engine is used, instead of every driver shipping inside the application.
- Datasource creation wizard with engine logos and prefilled defaults.
- Query scheduling and bulk approvals.
- AI analysis history dashboard with risk trends and most-flagged query types.
- Schema explorer ER view and a searchable object tree with masking-aware sample previews.
- Review plan templates, audit log CSV export and an e-mail invitation flow for new users.
v1.0.0 — General availability
The core platform — everything a team needs to govern database access end to end.
Proxy and execution
- Full SQL proxy for PostgreSQL, MySQL, MariaDB, Oracle and Microsoft SQL Server, plus admin-uploaded JDBC drivers for any other relational engine.
- Parser-based validation and classification, schema and table allow-listing, row caps, and DDL blocked by default — over reusable connections per datasource, so a governed query never waits on a fresh handshake.
SQL editor
- Dialect-aware highlighting, schema autocomplete, a formatter and a live AI hint panel.
Review workflows
- Per-datasource review plans, multi-stage approval chains, an AI review before human approval, auto-approve for reads, approval timeouts and submitter cancellation.
AI query analysis
- OpenAI, Anthropic and Ollama adapters with risk scoring, missing-index detection, anti-pattern flags and syntax suggestions.
Access control, audit and notifications
- Role-based access with per-user datasource permissions, time-limited grants and schema/table scoping.
- An append-only audit log with full event coverage and a searchable UI.
- E-mail, Slack and signed webhook notifications with retries.
Deployment and authentication
- Docker Compose, a Helm 3 chart with autoscaling and health probes.
- JWT sign-in with refresh-token rotation, SAML 2.0 single sign-on with auto-provisioning and attribute mapping, and OAuth 2.0 / OIDC sign-in with built-in provider templates.