What we’ve been shipping.

Jarel's core work model is now consistent end to end: Workspaces own access and billing, Projects hold legal work, and Chats keep the conversation history.

Product routes, APIs, and database tables now use the same Workspace, Project, Chat, and Database language. Retired organization, engagement, thread, and student-era structures were removed in the cutover.

The cutover keeps every Project and Chat scoped to its Workspace, with canonical ownership constraints and row-level access checks at the new boundaries.

Sign-in: Cloudflare Turnstile is now actually verified server-side. Previously a configuration gap let requests through without a valid token; now a missing or invalid token fails the request.

Engagements list page: previously returned a 500 on first load because of a column rename mismatch. The handler now degrades gracefully and returns the empty state instead.

Chat: assistant replies render reliably across all three streaming protocols (plain text, AI-SDK SSE, v0 line-protocol). The infinite-spinner regression introduced by a citation-verifier change is resolved.

Marketing pages (homepage, pricing, product, solutions, careers, about) are now CDN-cached. First paint dropped from ~2 s to ~200 ms with a steady cache HIT rate.

Homepage: removed a Suspense boundary that occasionally hung at ~22 s when Sanity was slow. Every server-side fetch now has a 5 s abort.

POST /api/auth/sign-out — proper server-side logout that revokes the Supabase session and clears auth cookies.

Forgot password / settings: server-side redirects now work for clients without JS. /forgot-password no longer loops back to /sign-in.

CSP narrowed: removed two third-party API origins from connect-src that were never reached from the browser anyway. Sentry CSP violation reports now flow to the security ingest endpoint.

Pricing page and blog cross-locale fallback notice now render in your selected language instead of falling back to English text.

Renamed “matters” to “engagements” across the product — better matches how M&A, advisory, litigation, and retainer work is discussed on the buy side.

Tenant-scoped row-level security on engagements: an old policy let cross-tenant reads slip through under specific request shapes; the replacement uses the same org-isolation helper as the rest of the schema.

Citations in chat replies are now verified against real sources before display. Cited passages link back to the underlying document or case at the precise page.

Source-linked answers: when no documents were consulted, the assistant says so explicitly instead of inventing a citation.