Skip to main content

v0.99.6 — Integration API Early Access, Public DPP Access Hardening, BMS Freshness

The largest release since v0.99.2. Introduces the Headless Integration API in Early Access, giving ERP and PLM systems a machine-readable path for authoring Digital Product Passports. Also ships access-tier hardening for public DPP fields, a BMS data freshness label, and improved AI quota feedback.

Integration API (Early Access)​

ERP, PLM, and manufacturing execution systems can now author Digital Product Passports programmatically over HTTP without using the Traceable operator portal.

The Integration API covers the full pre-publication lifecycle:

  • Create a DPP draft from product data in your source system
  • Update fields incrementally as data becomes available
  • Attach evidence documents (test reports, certifications, compliance declarations)
  • Check the publish gate to identify remaining Annex XIII data gaps
  • Submit the completed draft to the Traceable review queue

A human operator reviews and publishes the DPP in the portal. The API terminates at Submitted — this is a regulatory design constraint under EU Regulation 2023/1542 Art. 77, not a Phase 1 limitation.

Authentication uses a per-customer bearer key (pk_live_...) with HMAC-SHA256 request signing and idempotency key enforcement on all writes. Five scopes are available: dpp:read, dpp:draft:write, dpp:gate:read, dpp:submit, and document:write.

Availability: The Integration API is Early Access. It is enabled per-customer on request. Contact support@traceable.digital to request access. Production endpoints return 503 FEATURE_DISABLED until enabled for your account.

Documentation: Integration API

Public DPP Access Hardening​

The public DPP viewer now enforces access-tier restrictions for fields that carry restricted visibility under EU Battery Regulation 2023/1542. Fields designated as restricted (available only to market surveillance authorities, customs bodies, and other persons with a legitimate interest) are no longer visible in public DPP responses.

  • PoLI authority gate — authority access requests via the PoLI system now reach only the fields authorised for the requesting entity's legal basis. Over-broad field exposure to non-authorised callers has been closed.
  • Restricted field audit — nineteen field-level access paths were reviewed and tightened. Full field visibility is preserved for authorised authority requests.

Public DPP data (accessible to anyone with the QR code or slug) is unaffected for fields that are not restricted.

BMS Freshness Label​

Battery passports for products connected to a Battery Management System now display a freshness label showing when the BMS telemetry data was last received. This addresses a common question from downstream consumers: whether the performance and health data shown in the DPP is current or historical.

The label is surfaced on the public DPP viewer and in the JSON-LD output.

AI Quota Feedback​

When an AI-assisted operation (document extraction, compliance analysis) reaches the account's included quota, the operator portal now displays an informative toast notification explaining the quota situation and providing a clear path to contact support. Previously, quota-exceeded states surfaced as generic errors without actionable context.