v0.99.5 — GS1 Publish-Gate, Audit Trail, AI Cost Controls
Sprint 25 initial delivery. Adds a GS1 prefix registration gate to the DPP publish flow, surfaces the audit trail integrity viewer for platform administrators, and introduces per-plan AI cost controls. Includes a compliance score recompute fix and a batch of UX improvements across the operator portal.
GS1 Prefix Publish-Gate
Operators on paid plans can now register their GS1 company prefixes directly in Settings → GS1 Prefixes. The DPP publish flow validates that a registered prefix is present before a product can be published — preventing GTINs from being issued under unregistered prefixes, which would fail GS1 Digital Link resolution.
- GS1 Prefixes editor — operators add and save company GS1 prefixes from the Settings page. Prefix registration status is visible at a glance.
- Publish-gate enforcement — products whose GTIN does not match a registered prefix are blocked from publishing with a clear error message explaining the requirement.
- Admin visibility — the platform administration view now highlights operators on paid plans who have not yet registered a prefix, enabling proactive outreach.
Audit Trail Integrity Surface
Platform administrators can now view the full audit trail with tamper-detection indicators. Each audit record displays its hash-chain proof status, so administrators can verify that the platform's activity log has not been altered. This supports compliance requirements under EU Battery Regulation Article 66 and ESPR Article 77 relating to record integrity.
Personally identifiable information in audit records is clearly marked where present, and redaction markers are displayed for records that have been subject to data subject erasure requests.
Per-Plan AI Cost Controls
Platform administrators can now set a monthly AI spend cap per subscription plan. Once the cap is reached, AI-powered features (document extraction, compliance analysis) return a clear "quota reached" message rather than continuing to accrue cost. Caps are editable from the subscriptions administration page.
Compliance Score — Operator Actions Trigger Recompute
Approving or rejecting an operator verification task now immediately triggers a compliance score recompute for the affected product. Previously, score updates were deferred to background jobs, meaning the dashboard score card could show a stale value immediately after an approval decision.
UX Improvements
A batch of operator portal UX fixes shipped with this release, including:
- Improved error messages when document upload fails
- Consistent EU date formatting (DD MMM YYYY) on remaining portal surfaces that previously showed locale-ambiguous dates
- Minor copy and layout fixes across the product wizard, data request tracker, and compliance dashboard