Workbench Changelog

Corrective Action, the TDP review desk, and the desktop app alpha feature

• New Corrective Action application: open an investigation from a chat or a Jira ticket, gather cited evidence, and have the investigation chat write a sectioned report with evidence chips.
• TDP Review desk redesign: files on the left, a tabbed viewer in the middle, chat on the right. The queue is one table with status tabs, instant search, filters, sort and bulk actions. Choose the analysis type (SAR, DLA bid, other) at upload; forms fill automatically, exports keep the template layout, and numbered evidence pills map to boxes on the page. BOM and Specs panels with Excel export, a shared library, package archiving, shared chats, and part drawings redrawn sheet by sheet on the factory's letterhead.
• RFQ: the Match tab takes the documents to compare against and shows a match table; a new RFQ goes straight to its autopilot.
• Connectors: pick GitHub repositories from a list during onboarding; Slack redirect URL and scopes shown during setup; OneDrive token refresh and CAD/Altium enrichment fixes.
• Workbench desktop app (alpha): sign in to Workbench Alpha or a dedicated workspace; Corrective Action, TDPs and RFQs open as native tabs; unified Connections with Git, reference sources, Jira and Google Drive folder import; interactive KiCad schematic and layout tabs; Word and PowerPoint viewing; split view; signed and notarized macOS nightly builds. Product analytics and session replay are on by default and can be turned off in Settings.
• Chat and search: Anthropic and OpenAI models listed straight from the provider; a day-grouped personal work history; one search surface with recent searches and operator chips.
• Platform: public support page; Autodesk viewer credentials wired into every workspace; database outages answer 503 instead of 500; the CLI token is revoked when you sign out of a workspace.
• Security: critical and high dependency alerts closed across every service image (PyJWT, pypdf, transformers, sharp, handlebars, Helm and more); OS packages patched at build time; Scout front end moved to react-router v7 to close open-redirect CVEs; agent traces record metadata only unless content capture is explicitly enabled.

Applications (TDP Review, Corrective Action, RFQ) are enabled per workspace. Contact support to turn one on.

TDP Review, Scout API v1, LLM budgets, and Workbench Scribe feature

• TDP Review application: upload a technical data package (PDFs, scans, spreadsheets or a ZIP), Workbench reads every page, builds BOM and specification panels, and a package-aware chat answers with citations into the evidence. Every chat edit is a proposal you apply or reject. Processing is cancellable, checkpointed, and resumes after an interruption; reviewer work survives reprocessing.
• Workbench Scribe: drawing extraction as a platform application, with a per-run model picker, extended-property grounding, a drawer library and a part-cost estimator.
• Scout: one versioned REST API under /api/v1 with generated docs, self-serve API keys and usage metering; contract-award records and daily dataset refreshes.
• Chat: processing progress and queueing for large attachments, context token usage above the composer, editable tables with spreadsheet saves, Word and Office downloads, a CAD viewer for CAD citations in the source drawer, and sends that recover after a redeploy.
• Admin: shared daily LLM quotas with per-user share caps, admin-editable recovery tiers and live limits, and an LLM usage page that shows who holds each reservation. Amazon Bedrock as a provider, including AWS GovCloud regions, with Claude 5 model names and per-task default models.
• RFQ: one RFQ app at /rfq with a requirements grid and tree, a comparison ledger on the Matches tab, bulk editing, lenses and saved views.
• Platform: one runtime switch for installed applications; index self-healing that finds and repairs unsearchable documents and stale connectors; sign-out ends the identity-provider session and signs you out of every host; the Admin Console now appears only for admins.
• Security: critical Next.js, GitPython, nltk and anyio vulnerabilities patched; every new-tab link opens with noopener.

Trust pages, edge security hardening, and per-user access controls security

• Published public privacy, terms, and security pages.
• Edge TLS hardening: strict certificate validation to origin and automatic HTTPS redirection across all domains.
• Personal handles with a streamlined landing experience, per-user application and agent access controls, and user lifecycle management (invite, deactivate, delete) on the Users page.
• This status page and changelog went live.

Email sign-in, two-factor authentication, and instant workspaces auth

• Email/password sign-in with email verification and password reset, alongside Google and Microsoft SSO.
• Optional TOTP two-factor authentication for all accounts.
• Free tier: workspaces are provisioned instantly on signup with trial usage limits.
• New "Switch Workspace" menu for moving between workspaces you belong to.

Data Center module and platform infrastructure upgrade feature

• Data Center module: rack elevations, power and network topology, and asset tracking for data-center engineering teams.
• Platform migrated to upgraded, autoscaling infrastructure for improved reliability and faster workspace deploys.

Engineering intelligence foundation feature

• Document management with connector-based ingestion (Google Drive, Altium 365, and more).
• AI assistant with chat over your engineering documents and data.
• Multi-tenant workspaces with single sign-on across the platform.