What changed on CrawlCheck, and when.
Every user-visible release, every set of release notes, and every change to the rules that decide findings, newest first. Rule changes carry the notice they were given; corrections to anything already published are on the correction log.
Releases
Release notes
Rule changes
| Date | Change | Applies to | What changed |
|---|---|---|---|
| 2026-10-22 | sv33 · scoring | report grades | Exposed files and secrets now counts toward Reach and Error pages toward Read. Reports graded earlier keep the stages they were graded with until rescanned. |
| 2026-10-22 | tscope1 · decision | preflight calls that name an MCP endpoint (opt-in) | A preflight for connect or transact may name an MCP endpoint and its approved tool-list hash. The decision then states the endpoint and tool state it covered, blocks when the live tools differ, and needs a person when they cannot be read. |
| 2026-10-22 | adv1 · scoring | report grades and agent decisions | New finding codes start as advisory: shown, but held outside the grade and every decision until measured (see /accuracy). SECRETS_EXPOSED is the first. |
As JSON: /changelog.json. The full rules and their notice policy are on /policy.