Changelog

What changed, by release

Public beta: one-command installer from get.nexapanel.io with content-addressed, SHA-256-verified artifacts and a --verify-artifacts pre-flight.
Installer hardening: ACME webroot permissions, reload-race-tolerant certificate probe, locked-down config directory permissions.
License Center: built-in self-hosted licensing with suspend/revoke propagation. Enforcement remains off by default.
Partner licensing API (backend-to-backend, token-guarded) for operators/partners.
Production licensing service (license.nexapanel.io) is live for future partner use — customer onboarding is not open yet.
Live public demo at demo.nexapanel.io: dedicated host, demo mode, seeded fake data, automatic resets.
Update Center: gated check → prepare → activate → apply flow validated on production, with pre-rollout backup.

Release pipeline: reproducible builds, content-addressed artifacts, checksum manifest.
Fresh-install / upgrade / rollback validation on disposable hosts.

Update Center: panel-safe apply + rollback (agent activation operator-gated).
Scoped app_tester RBAC role.
Normal website hosting validation (static/PHP, domains, SSL).
Published, checksum-verified release artifacts; reversible alpha.6→alpha.7 upgrade path.
Tester-experience UI polish.

Applications Center: Node.js & Laravel MVP across supported OS.
Hardened private-alpha baseline: enforced 2FA, UFW, loopback DBs, socket-only agent, nightly backups.

Earlier alpha builds (alpha.1–alpha.5) were internal. This changelog summarizes notable, user-facing changes only.