Features
We separate shipped functionality from configuration-gated and planned work. The API reports capability status the same way — nothing is presented as working before it is.
Available
Implemented and covered by automated tests- Session-cookie dashboard auth and Bearer API keys with scopes
- Asynchronous recognition jobs with retry, backoff, and timeouts
- Deterministic local provider for synthetic challenges (demo mode)
- Transactional credit ledger with reservations and refunds
- Idempotent job submission via Idempotency-Key
- Usage analytics: daily volume, success rate, processing percentiles
- Admin console: users, jobs, providers, plans, credit adjustments, audit log
- Status page powered by live health checks
- Support tickets and audit-trail event logging
Beta / configuration-gated
Implemented, requires operator configuration to activate- Stripe billing (checkout, subscription sync, signed webhooks)
- SMTP email delivery (dev outbox is used without it)
- S3-compatible object storage for challenge uploads
Planned
Not implemented — listed for transparency, not advertised as working- Organization/team workspaces (schema exists, UI pending)
- Multi-factor authentication
- Server-Sent Events for live job updates (polling is used today)
- Additional external recognition providers behind the provider interface