Planned

• Lemon Squeezy payment integration
• SQLModel/SQLAlchemy shard
• Project-local indexing
• VS Code extension update
• Custom enterprise shards

Added

• Usage context rules engine: 30 rules across all 7 ecosystems checking HOW functions are used
• WordPress (14 rules): enqueue hooks, redirect+exit, nonce checks, init/widgets_init hooks, localize after enqueue
• WooCommerce (2 rules): wc_get_product and wc_get_order false return checks
• React (2 rules): async useEffect flagged as error, dangerouslySetInnerHTML without sanitiser
• Python (7 rules): os.system, subprocess shell=True, eval(), pickle.load/loads security checks
• JavaScript (1 rule): JSON.parse without try/catch
• Laravel (4 rules): env() outside config, redirect without return, bcrypt vs Hash::make, decrypt without try/catch
• Two severity levels: warning (best practice) and error (will cause bugs)
• GET /rules endpoint: public, no auth, lists all rules by ecosystem with stable IDs
• disable_rules parameter on /verify: skip rules by function name or rule ID
• Stable rule IDs on every rule for future configurability
• Parameter change history tracking: explains WHY a param mismatch occurred with version, old/new names, and migration notes
• 13 tracked parameter changes across wp_enqueue_script, wp_register_script, get_terms, wp_count_terms, and more
• History surfaced in /verify param_issues and /compare_params responses with param_history array

Performance

• 310x speed improvement: full deep check 1,613ms down to 5.2ms
• METHOD_INDEX: 19,209 entries for O(1) class/method lookups
• PREFIX_INDEX: 18,689 buckets for O(1) fuzzy candidate retrieval
• Pre-compiled context rule regexes at import time
• Bare method names now return class-qualified suggestions instantly
• Verified-only calls: 0.03ms. Full file (341 lines, 89 claims): under 25ms

Changed

• Verification layers increased from 5 to 8
• Fuzzy suggestion cutoff raised to 0.6 (reduces noise)
• Candidate pool capped at 100 for consistent performance

Added

• Parameter mismatch detection wired into /verify as an automatic second pass
• Function calls with stated $params are compared against stored signatures
• Catches renamed parameters (e.g. $in_footer changed to $args in wp_enqueue_script)
• Missing and extra parameters flagged with stored vs stated comparison
• Class/method pairing validation added to /verify as an automatic second pass
• Detects ClassName::method and ClassName->method patterns
• Flags when a method is called on the wrong class (e.g. WC_Product::get_total belongs to WC_Abstract_Order)
• New response arrays: param_issues, class_mismatches
• New summary fields: param_issues count, class_mismatches count
• Unknown status for functions outside any shard namespace (private/custom code no longer flagged as hallucinations)
• Custom React hooks (useShoppingCart, useAuth, etc.) correctly classified as unknown, not hallucinated
• Whitelist parameter on /verify: pass namespace prefixes to skip your private functions
• New response arrays: unknown, whitelisted
• Hallucination rate now only counts not_found (shard namespace misses), excluding unknown and whitelisted
• Usage context rules engine: checks functions are used in the correct context (third pass)
• 30 built-in rules covering WordPress, WooCommerce, React, Python, JavaScript, and Laravel context patterns
• Flags wp_enqueue_script outside add_action hook, wp_redirect without exit, register_post_type without init hook, update_option without nonce check, and more
• Two severity levels: warning (best practice) and error (will cause bugs)
• New response array: context_issues
• GET /rules endpoint listing all active rules by ecosystem with severity and descriptions
• disable_rules parameter on /verify to skip specific context rules per request

Changed

• Verification layers increased from 5 to 8
• CLI output now shows parameter issues and class/method mismatches
• Total verified triples across all shards: 201,066

Added

• WooCommerce shard — 819 functions, 473 classes, 4,239 methods, 2,533 hooks, 32,451 triples
• JavaScript shard expanded from 4,759 to 31,605 triples — now covers ECMAScript built-ins, 1,055 Web API interfaces (DOM, Fetch, Canvas, WebSocket, Workers), and Node.js core
• 755 deprecated browser APIs now detected in JavaScript shard
• DOM inheritance aliases — Element.addEventListener, Document.querySelector recognised correctly
• Business plan added (£99/mo, up to 15 developers, 50,000 req/day)
• VS Code extension published to marketplace

Changed

• Total verified triples across all shards: 167,582
• Team plan updated to 5 developers, 15,000 req/day

Added

• VS Code extension with diagnostic underlines — red for hallucinated, yellow for deprecated, green for verified
• Quick-fix code actions to replace hallucinated function names with suggestions
• Hover provider showing parameters, return type, source file, and version
• Autocomplete suggestions from VFault search API
• Status bar showing verification summary
• Verify on save with configurable debounce
• Verify selection command
• Per-language enable/disable settings
• API key authentication and tiered rate limiting
• Daily and per-minute rate limits — Free (100/day), Pro (5,000/day), Team (20,000/day)
• GET /usage endpoint to check remaining requests
• Lemon Squeezy webhook for automatic API key generation on subscription
• Admin endpoint for manual key creation
• New website — home, pricing, docs, status, and changelog pages