Changelog & Release Notes

Reusable accessible multi-select filter dropdown with search, batch Select All/Clear All, count badges, and WCAG 2.2 keyboard navigation; brand-authentic Obsidian redesign of the Enterprise Risk & ROI Calculator with modular 5-desk statutory modeling; and cross-surface filtering across products directory and changelog.

Built reusable, accessible multi-select filter dropdown component supporting search, count badges, Select All / Clear All utility actions, and light/dark theme variants. Decoupled popover (role='dialog') with inner role='listbox' ensuring strict WCAG 2.2 APG compliance.

Implemented ArrowUp/ArrowDown list navigation, Enter/Space toggling, onBlur container dismissal, Escape key closing with active focus restoration back to the trigger button, and aria-live='polite' search result announcements.

Completely overhauled the ROI calculator: replaced off-palette navy card with brand-authentic Obsidian (#0b0f19) matching the apex gateway; elevated typography to WCAG AAA contrast (#ffffff numbers at 19.14:1, alert coral #ff8080 at 7.89:1, emerald #34d399 at 9.96:1).

Connected financial risk modeling directly to SUITE_APPS across all 5 compliance desks (Tax Exemption, Prop 65, EU GPSR, EU EPR Packaging, CPC Toy Safety) with 1-click presets (Full Sovereign Suite, B2B Wholesale Specialist, Cross-Border EU & UK, Children's & Safety) and proportional stacked risk chart.

Integrated multi-select filtering into Products Directory (/products) by category and deployment status with instant keyword search and 24x24px dismiss chips, and into the Public Changelog (/changelog) by product scope and category.

Elimination of single-device hardware constraints; introduction of universal sovereign Linux server deployment; comprehensive 8-provider cloud compatibility matrix; and roadmap for native 1-click in-app cloud extensions.

Added dedicated cloud compatibility showcase on the homepage and wiki featuring 8 major cloud container and VPS platforms (AWS, GCP, DigitalOcean, Hetzner, Railway, Render, Fly.io, Linode) with recommended specifications, direct links, and pricing estimates.

Announced product roadmap for native in-application cloud extensions directly inside the merchant admin, enabling merchants to connect AWS, GCP, DigitalOcean, Hetzner, or Railway with 1 click without command-line configuration.

Replaced all single-device hardware references across UI, legal documents, FAQ registries, Docker configurations, and documentation with platform-agnostic Linux server (bare-metal/dedicated host) and cloud VPS terminology.

Configured permanent HTTP 301 redirects and slug alias mapping from /wiki/sovereign-pi-hosting to /wiki/sovereign-server-hosting to ensure zero broken links or lost search equity.

Replaced horizontal wordmark with standalone brand emblem to eliminate navbar text wrapping across all viewports; elevated enterprise ticker to WCAG AAA contrast; hardened App Proxy client IP extraction and PDF Content Security Policy.

Overhauled top telemetry ticker bar colors (#f8fafc, #34d399, #cbd5e1 on #0b0f19) achieving up to 18.5:1 contrast ratio, exceeding WCAG AAA standards for ambient readability.

Replaced horizontal logo with standalone 44x44 emblem symbol, reclaiming 180px width; enforced white-space: nowrap on navigation pills; created .hub-btn-outline-light with 14:1 contrast resolving white-on-white button defect.

Hardened Storefront App Proxy client IP extraction to inspect Cloudflare cf-connecting-ip and x-real-ip before x-forwarded-for, defending against header-spoofing rate-limit bypasses.

Removed unsafe-inline from uploaded certificate serving routes, restricting CSP to default-src 'none'; object-src 'self' blob:; frame-ancestors 'self' https://admin.shopify.com https://*.myshopify.com.

Unconditionally assigned global.prismaGlobal in app/db.server.ts across all environments to eliminate pool exhaustion risks during server re-evaluations.

Remastered high-resolution full-bleed 240x240 icon artwork across all 5 compliance desks; launched dedicated public interactive demos portal (/demos) with Shopify app review video script and direct test credentials.

Created comprehensive public demos hub detailing both live interactive test environments (Live Production Hub & Sandbox Partner Store) and on-demand video review assets for Shopify App Store reviewers.

Regenerated and optimized crisp full-bleed icons for Tax Exemption Desk, CPC Desk, GPSR Desk, EPR Desk, and Prop 65 Desk from 1024x1024 master assets, eliminating low-resolution downsampling artifacts.

Added scripts/dns/cloudflare-dns.mjs with automated subpath and subdomain CNAME and A record synchronization for domillio.org, ted.domillio.org, and tax.domillio.org.

Complete statutory regex format validation for all 50 US States, DC, and Canadian provinces; zero-dependency in-memory PDF Flate parser; theme-native buyer upload portal (/apps/tax-exempt); and slide-over audit inspector drawer.

Built format validation covering all 50 US states, District of Columbia, and Canadian GST/HST registration numbers with official state revenue department verify links.

Engineered stream-based Flate decompression parser (document-detector.ts) that scans uploaded certificates directly in memory, pre-filling state, permit number, entity name, and expiration dates instantly.

Created /apps/tax-exempt storefront submission portal via Shopify App Proxy with real-time format validation, anti-spam honeypot, sliding-window rate limiting, and 3-step progress stepper.

Interactive Polaris slide-over drawer displaying customer permit history, official state seal emblems, compliance audit timeline, 1-click tax ID copy, and tailored statutory renewal notices.

Export certificate records with OWASP formula injection protection: automatic trimming of leading whitespace and prepending single quotes to formula triggers (=, +, -, @, |, %).

Initial production release submitted to the Shopify Partner App Store. Multi-container Docker deployment with PostgreSQL 16 Alpine, Cloudflare Zero Trust Tunnel, GraphQL Admin API customer automation, and mandatory GDPR webhooks.

Completed production packaging, verified 14/14 Shopify CLI automated security requirements, and officially submitted Domillio Tax Exemption Desk to Shopify Partner Dashboard.

Automatic updating of Shopify customer records via Admin GraphQL API: sets taxExempt: true and adds custom customer tags upon approval; revokes upon rejection/expiration.

Implemented HMAC-verified webhooks for customers/data_request, customers/redact (scrubs customer PII), and shop/redact (erases store certificate registry within 48 hours).

Turnkey multi-container topology orchestrating React Router 7 / Node 22 app, PostgreSQL 16 Alpine, and Cloudflare Zero Trust Tunnel for sovereign self-hosting with zero inbound open router ports.