# AdvisoryAI Changelog

## 2026-02-25
- Unified search security hardening:
  - Tenant-scoped chunk/doc IDs for findings, VEX, and policy live adapters to prevent cross-tenant identity collisions during incremental indexing.
  - Backend and frontend snippet sanitization tightened to strip script/HTML payloads before rendering.
  - Threat model for unified search added to `knowledge-search.md` (tenant isolation, injection, XSS, query-amplification controls).

## 2026-02-24
- Unified search migration and deprecation updates:
  - Platform catalog entities are ingested into unified search so type-level platform navigation is available from `/v1/search/query`.
  - Legacy search endpoint `/v1/advisory-ai/search` emits `Deprecation: true` and `Sunset: Thu, 31 Dec 2026 23:59:59 GMT`.
  - Consumer migration target: move all search consumers to `/v1/search/query` before the sunset date.