v0.5 — today
- Paid exports only: anonymous previews are rounded to 5 mm, undimensioned and watermarked.
- Signed, expiring download links bound to the panel parameters.
- Every DXF/OBJ/JSON export stamped with the licence (LICENCE layer, OBJ header, JSON block).
- Per-licence daily export cap, per-IP rate limiting, JSONL audit log.
- HMAC session cookies — survive a restart, cannot be forged; security headers on every response.
- Metered agent API:
POST /api/v1/panelwithX-API-Key. - Material data in the UI: groove depth, skin left, minimum return, weight per thickness.