Release 2026.10.16-1

Security

• The Redact step removes the decoded value of every barcode it blacks out; the viewer used to still show it. A transaction redacted before this release keeps the value until it is re-run from the Redact step.
• Wrong guesses of the current password when changing a password count towards the sign-in limit.

New

• Must Be Found in the Document rule: catch values that are not actually on the page. The rule flags any field whose value cannot be found in the document. See Business Rules.
• Self-hosted image: also carries every change of 2026.10.15-1, which was not published as an image, Hosting Options (Preview) included.

Improved

• Re-running a document waits up to five minutes for model capacity instead of failing at once. The viewer shows the wait and offers Cancel re-run.
• A box you draw or move on the page counts as your edit, and rules check the field again once when it changes what they read.
• Every field keeps its original text from the page.
• The Monitoring summary and usage figures load faster.

Fixed

• A document no longer goes empty when a server stops in the middle of its re-run.
• A wrong current password on Change password says so, instead of signing you out.
• The rule engine is replaced before it runs out of room, instead of failing rules.
• The license usage report never shows a lower count than the previous report.
• Document tiles no longer ask for thumbnails before the pages exist, or reload on every status check.

API

• Business rules: has_region tells whether a value has a region on the page. See Custom rules.