Changelog

Notable changes to the QuotaKit dashboard, ingest API, and SDKs. Follows Keep a Changelog.

Unreleased

Added

  • Customer-settable monthly spend cap with hard cutoff when reached.
  • Sentry error monitoring (errors-only, production-gated).
  • ETag optimistic concurrency on PATCH /api/billing/spend-cap.
  • Python SDK fast-drop with 5-minute probe window after spend-cap hit.

Changed

  • Consolidated staging and production onto a single Supabase project.
  • Ingest moved from Vercel Functions to Railway (always-on Docker container). SDK default ingest URL is now https://ingest.quotakit.io.

Security

  • Structured error logs with customerId + endpoint tags for production triage.
  • Added SECURITY.md with vulnerability reporting policy.
  • Published Terms, Privacy, DPA, SLA, Acceptable Use, Cookie Policy, and Security pages.