What changed,
when.

v0.28.x

• Refusals for a whole fleet in one place, with the reason. Every rate limit published; /capabilities matches what is served.

v0.27.0

• Projects from the console. A station's permissions, blocking and key rotation from there too.

v0.26.0

• Each authority in the Root CA's trust list carries its own access point.

v0.17–0.24

• Console at /console: stations, what each credential authorises, and why a request was refused.

v0.16.0

• Timestamps count TAI. /lookup resolves registered subordinate CAs.

v0.15.0

• The RCA CTL lists registered EAs and AAs. Ticket validity by station type.

v0.14.0

• Delta trust lists by sequence. Response codes by cause.

v0.13.0

• Stations register through a subscriber; tickets stay within their profile. New hierarchy.

v0.12.0

• Canonical key registered before enrolling; permissive mode removed.

v0.11.0

• /bench: decode, check and verify C-ITS security objects.

v0.10.0

• Misbehaviour reports protected against replay.

v0.9.x

• Misbehaviour reporting complete (/uploadMR-v1*). Enrolment passes the ETSI conformance suite (TS 103 525).

v0.8.x

• Brainpool P-256r1 and P-384r1 end to end. Delta ECTL and TLM link certificate.

v0.7.x

• Enrolment and ticket requests verified as the standard describes.

v0.3–0.6

• ITS-AID registry, curve-aware digests, delta CRL, ticket validity capped at one week.

v0.1.x

• TLM separate from the Root CA, three curves, strict OER wire.