v1.6.0 — End-Cell

End-Cell issuance (create_end_cell_intent) + rail verify with pinned Ed25519 key; canonical verify.keyhalve.com origin; End-Cell-first README.

v1.5.0 - platform delegation (on_behalf_of)

Python parity for platform delegation (Fork B). on_behalf_of on all four seal methods; verify_intent surfaces verification_level + delegated_by. Requires the ValidPay API with delegation (live 2026-06-19). See CHANGELOG.md.

v1.4.0 — embed_qr + QR placement

Adds embed_qr(pdf_bytes, retrieval_id, key, placement) and the QrPlacement contract (anchor + insets + width + units + page), plus pure build_verify_url / resolve_qr_rect helpers. New optional extra validpay[pdf]; core stays dependency-light. Mirrors @validpay/node-sdk 0.7.0.

v1.3.0 — file mode (create_file_intent)

Adds create_file_intent() to seal raw file bytes (PDF/image/DOCX) end-to-end with split-key + file metadata, plus encrypt_bytes()/decrypt_bytes() helpers. See CHANGELOG.md. Triggers PyPI trusted publishing.

v1.2.0 — Audit fixes (C-1, M-5)

• Commitment hash now computed over ciphertext (C-1 fix)
• AES-GCM AAD binding for metadata integrity (M-5 fix)
• Backward compatible: legacy v1 documents still verify; documents sealed by this version use commitment_version=2 / encryption_version=2

v1.1.0 — split-key by default

Changed

• Split-key protection (Patent C) is now the default (Prompt 094). create_intent() returns Share A; Share B is stored on the ValidPay server. The full decryption key never exists on any single system. split_key=False = legacy single-key flow.
• verify_intent() verifies split-key intents transparently (fetches the fragment, XOR-combines).

Deprecated

• create_split_key_intent() — alias of create_intent(), emits DeprecationWarning.

v1.0.1 — domain migration to validpay.com

Prompt 086B — primary domain migrated from validpay.io to validpay.com. Default base URL now points at https://api.validpay.com.

Backward-compatible: existing 1.0.0 installs keep working because Cloudflare 301-redirects api.validpay.io → api.validpay.com. New installs save a hop.

base_url constructor argument still wins for staging / self-hosted setups.

Also includes a CI fix: the publish workflow's permissions: block now grants contents: read so actions/checkout succeeds under the trusted-publishing id-token: write scope.

See CHANGELOG.md for details.