Every release,every breaking change

Studio public preview

Visual flow builder for governed data products. Drag sources, attach policies, publish endpoints — without writing SQL.

• Drag-and-drop view composer with live preview
• Policy library: pii.mask, audit.all, rbac.per_role, consent.gate
• One-click publish to SQL, REST, MCP
• Available on Pro and Enterprise plans

MCP server GA

Model Context Protocol endpoints for every published view. AI agents query SOFI views with typed args, RBAC and per-call audit.

• MCP descriptor auto-generated from view schema
• Per-agent RBAC role + rate limits
• Audit log includes agent identity, prompt fingerprint and rows returned

Predicate pushdown for nested Mongo aggregations

Mongo aggregation framework pushdown now handles nested $lookup with $unwind correctly. p95 down 38% on customer-360 patterns with Mongo events.

Pgwire endpoint

PostgreSQL wire protocol on port 5556. Any client that speaks Postgres now connects directly to SOFI views — psql, JDBC, BI tools, ORMs.

• TLS by default with Let's Encrypt
• Per-tenant connection pool
• Compatible with Tableau, Looker, Metabase, Superset, DBeaver

Audit log schema v2

Audit rows now include source resolution and policy decisions. Existing log readers must migrate to the new schema by v0.4.0.

• Old field: actor → new: identity (kind, id, scope)
• New field: policy_decisions[] (allow / mask / deny)
• Migration helper available via sofi audit migrate

Row-Level Security on every tenant table

PostgreSQL RLS now enforced on all tenant_id-bearing tables. Cross-tenant joins blocked at the database layer, not just in application code.

• Per-tenant policies generated from SQLAlchemy models
• Lockout audit fires before RLS denial reaches consumer
• Verified with red-team scenario suite

Legacy /api/v0 endpoints sunset

v0 REST endpoints removed. All consumers should migrate to /api/v1. Migration guide in /docs/migrations/v0-to-v1.

Public beta

First public release of SOFI virtualization. Multi-tenant cloud, 9 database engines, 4 file formats, REST + SQL endpoints, RBAC, audit and PII masking.