Changelog

Notable, verified changes across the SoftQuantus stack. Dates are release dates to production unless stated otherwise.

2026-07-31

Documentation is public. The technical documentation — QCOS, API reference, SDK, CLI, MCP, QuantumLock and the Platform guide — no longer requires a login. Only enterprise runbooks remain gated.
Unknown documentation paths now return a real 404 instead of redirecting to the login page.
QCOS API surface truth pass. The published OpenAPI specification was regenerated from the running code (512 paths). Platform billing routes retired from QCOS in the R2 boundary work no longer appear in the spec — money operations live exclusively on platform.softquantus.com.

QCOS MCP server: 71 typed tools. The softqcos-mcp server now declares input schemas for all 71 tools, generated from the OpenAPI specification. The hosted endpoint (https://mcp.softquantus.com/mcp) uses Streamable HTTP with dual credentials: a service token identifies the calling service, your X-API-Key identifies you.

QuantumLock 2.x: real post-quantum signatures. Evidence bundles and license artifacts are signed with RSA-PSS-SHA256 plus ML-DSA (FIPS 204) via liboqs; the container build fails if a PQC sign/verify round-trip does not pass. The development-only HMAC fallback is labelled as not-a-signature and refuses to start in production.
QuantumLock surface cleanup. The PKI, cipher and trust-badge services were withdrawn and now answer 410 Gone with a written reason.

Quantum OS user manual published: end-to-end guide for running the OS, connecting a quantum computer and adding GPU simulation.
QCOS Monitoring & Control layer. The hardware boundary (qcos-mc/1 protocol with modality adapters) shipped to production.