HELILOG
Transport Canada review candidate — not approved for paper-log cutover. Signed tablet records remain subject to the open regulatory and hardware evidence gates.
← Back to HeliLog

Product updates

Version history

See what changed in every HeliLog review release, including additions, fixes, and verification notes.

Current version0.2.0-rc.19

0.2.0-rc.19

Current installable APK: `0.2.0-rc.19` (`versionCode 20`). It supersedes the rc.18 review APK while retaining form version 1 and calculation/core artifact 0.2.0-rc.2. iOS build 15 remains reserved for the coordinated TestFlight attempt; no successful IPA delivery is claimed yet.

Added

  • Added admin-managed, named aircraft logbook templates with selectable optional fields and immutable per-aircraft template snapshots.
  • Added required aircraft configuration catalogues, pilot configuration selection, and separate manual weight-and-balance-in-effect entry in the tablet workflow.
  • Added administrative user-access controls and DIR7 review support across the web archive and native tablet application.

Changed

  • Limited journey-book pages to six flight entries and improved activity search, summaries, review presentation, and tablet field visibility.
  • Enforced approved aircraft configurations in both tablet signing and server acceptance while retaining append-only audit and correction behavior.
  • Standardized human-readable timestamps and "today" defaults on the operational timezone (America/Vancouver, labelled PST/PDT) across web and tablet; storage and signed payload instants remain UTC.

Open delivery gate

  • This remains a Transport Canada review candidate. Physical-tablet, operational, recovery, and regulatory acceptance evidence remains open; the paper journey log is not replaced by this build.

Verification

  • Clean dependency installation, typecheck, lint, 338 tests, production web/core builds, tablet bundle sync, Android unit tests/lint, signed release assembly, APK signature/metadata checks, and release-coupling verification completed successfully.
Current release

0.2.0-rc.18

Current installable APK: `0.2.0-rc.18` (`versionCode 19`). It supersedes the rc.17 review APK while retaining form version 1 and calculation/core artifact 0.2.0-rc.2. iOS build 15 remains reserved for the coordinated TestFlight attempt; no successful IPA delivery is claimed yet.

Added

  • Added a clickable application version to the website footer so the currently running release is visible from every page.
  • Added a public version-history page at /changelog, generated from this changelog as the single source of truth, with release dates, updates, fixes, open gates, and verification notes for every review candidate.

Verification

  • Typecheck, lint, the full test suite, core build, tablet bundle sync, Android unit tests/lint, signed release assembly, APK signature/metadata checks, and release-coupling verification completed successfully.

0.2.0-rc.17

Current installable APK: `0.2.0-rc.17` (`versionCode 18`). It supersedes the rc.16 review APK while retaining form version 1 and calculation/core artifact 0.2.0-rc.2. iOS build 15 remains reserved for the coordinated TestFlight attempt; no successful IPA delivery is claimed yet.

Added

  • Added an authoritative iOS LogbookNative Capacitor bridge with SQLCipher storage, Secure Enclave/Keychain-separated device keys, PIN-wrapped Ed25519 signer keys, immutable command/outbox/receipt transactions, privacy-safe process-session time confidence, and bounded native HTTPS transport.
  • Archived server projections are persisted and merged with local pending records, so a newly provisioned tablet receives the existing aircraft book. Native signing now rejects noncanonical, falsely attributed, wrong-artifact, wrong-device, visible-signature-mismatched, and unreserved-sequence envelopes before key use.
  • Each archived projection carries the exact retained envelope, user signature, historical signer/receipt keys, signed receipt, immutable page/section/slot, and volume genesis. Both native runtimes verify the complete chain before showing it; oversized complete-volume payloads fail closed at the documented rollover gate.
  • Native HTTPS is pinned to the reviewed API origin. Enrollment and sync responses receive a one-time SQLCipher authorization from the native transport; JavaScript cannot forge an activation/bootstrap transition or redirect credentials to another HTTPS host.
  • Added iOS Data Protection and backup-exclusion handling, reinstall consistency checks, P-256 SPKI device identity export, and an Apple privacy manifest.
  • Added pinned-Xcode macOS CI, Swift unit/UI tests, IPA release-coupling checks, and a protected App Store Connect/TestFlight release workflow.
  • iOS intentionally does not transmit boot time or boot-time-derived values. It uses a constant wire placeholder and conservatively loses its time anchor after process relaunch; this avoids misusing Apple's SystemBootTime required-reason API.

Changed

  • Collapsed tablet flight-line metadata into a tighter single-line header and adjusted row spacing for denser journey-book scanning.
  • Improved signed-correction review and audit-history rendering so replacement, withdrawal, visible-signature, and archive event details are clearer without changing the append-only correction model.

Open delivery gate

  • No iOS binary is claimed as distributed by this source change. Apple signing credentials, export-compliance/privacy confirmation, App Store Connect upload, internal TestFlight assignment, and the physical-iPad acceptance run remain operator-gated. iOS build 15 remains reserved after App Store Connect rejected a duplicate build 14; no successful IPA delivery is claimed yet.

Verification

  • Typecheck, lint, the full test suite, core build, tablet bundle sync, Android unit tests/lint, signed release assembly, APK signature/metadata checks, and release-coupling verification completed successfully.

0.2.0-rc.16

Current installable APK: `0.2.0-rc.16` (`versionCode 17`). It supersedes the rc.15 review APK while retaining form version 1 and calculation/core artifact 0.2.0-rc.2. iOS build 15 is reserved for the coordinated TestFlight attempt; no successful IPA delivery is claimed yet.

Changed

  • Required an explicit signing-intent confirmation before creating, replacing, or withdrawing a record, and reset that confirmation when the record or correction action changes.
  • Placed locally saved flight rows in their expected next archive page and slot when the latest server-assigned position is known, while keeping the placement clearly marked as provisional until a server receipt assigns it immutably.
  • Added a warning icon and clearer Saved locally wording to pending records, while preserving receipt, rejection, reconciliation, and tamper states.
  • Improved tablet field sizing, technical-total labels, and record-detail stacking so signing and logbook views remain usable at narrow widths.

Verification

  • Typecheck, lint, the full test suite, core build, tablet bundle sync, Android unit tests/lint, signed release assembly, APK signature/metadata checks, and release-coupling verification completed successfully.

0.2.0-rc.15

Current installable APK: `0.2.0-rc.15` (`versionCode 16`). It supersedes the rc.14 review APK while retaining form version 1 and calculation/core artifact 0.2.0-rc.2. iOS delivery remains operator-gated at build 14; no IPA is claimed for this Android release.

Fixed

  • Changed the Android adaptive launcher icon to use the centered, padded vector foreground so the HeliLog rotor remains inside Android's safe zone instead of being enlarged and clipped by circular or squircle launcher masks.
  • Retained the supplied rounded-square artwork for legacy Android launcher icons.

Verification

  • Typecheck, lint, the full test suite, core build, tablet bundle sync, Android unit tests/lint, isolated signed release assembly, APK signature/metadata checks, and release-coupling verification completed successfully.

0.2.0-rc.14

Current installable APK: `0.2.0-rc.14` (`versionCode 15`). It supersedes the rc.13 review APK while retaining form version 1 and calculation/core artifact 0.2.0-rc.2. iOS delivery remains operator-gated at build 14; no IPA is claimed for this Android release.

Changed

  • Rebranded the tablet application as HeliLog with the supplied Ink, Hi-Vis, Amber, Slate, and Paper palette, plus the new app mark and wordmark.
  • Replaced Android legacy/adaptive launcher icons and launch screens at every required density, and updated the packaged application label to HeliLog.
  • Added the coordinated HeliLog web favicon, PWA icons, iOS app icon, launch art, native display name, and product-facing verification-email copy.

Verification

  • Typecheck, lint, the full test suite, core build, tablet bundle sync, Android unit tests/lint, signed release assembly, APK signature verification, release metadata inspection, and release-coupling verification completed successfully.

0.2.0-rc.13

Current installable APK: `0.2.0-rc.13` (`versionCode 14`). Current iOS TestFlight metadata is `0.2.0` (`build 14`) for the same release label. It supersedes the rc.12 review APK while retaining calculation/core artifact 0.2.0-rc.2.

Changed

  • Removed artificial sequential flight numbers from the tablet journey-log cards, paired record headings, accessible labels, and linked-record descriptions. Flight entries now appear as ordinary logbook lines.

Verification

  • Tablet tests, typecheck, lint, full test suite, tablet bundle sync, Android test/lint, signed release build, APK signature verification, and release-coupling verification completed for the versioned review APK.

0.2.0-rc.12

Current installable APK: `0.2.0-rc.12` (`versionCode 13`). It supersedes the rc.11 review APK while retaining calculation/core artifact 0.2.0-rc.2.

Changed

  • Removed the summary-page “View details · edit with signed correction” and “Edit record” lines. The book now shows only the record card; tapping it opens the detail sheet, where the signed correction action is available.

Verification

  • Tablet tests, typecheck, lint, full test suite, tablet bundle sync, Android test/lint, signed release build, APK signature verification, and release-coupling verification completed for the versioned review APK.

0.2.0-rc.11

Current installable APK: `0.2.0-rc.11` (`versionCode 12`). It supersedes the rc.10 review APK while retaining calculation/core artifact 0.2.0-rc.2.

Changed

  • Integrated the Edit record action into each current record card instead of placing it outside the record.
  • Made the correction sheet use a fixed tablet viewport with touch scrolling so the signature, PIN, and submit control remain reachable at the bottom.

Verification

  • Tablet tests, typecheck, lint, full test suite, tablet bundle sync, Android test/lint, signed release build, APK signature verification, and release-coupling verification completed for the versioned review APK.

0.2.0-rc.10

Current installable APK: `0.2.0-rc.10` (`versionCode 11`). It supersedes the rc.9 review APK while retaining calculation/core artifact 0.2.0-rc.2.

Changed

  • Added a visible Edit record action directly to each current tablet record. It opens the signed-correction form immediately; historical audit rows remain read-only without an edit action.

Verification

  • Tablet tests, typecheck, lint, full test suite, tablet bundle sync, Android test/lint, signed release build, APK signature verification, and release-coupling verification completed for the versioned review APK.

0.2.0-rc.9

Current installable APK: `0.2.0-rc.9` (`versionCode 10`). It supersedes the rc.8 review APK while retaining calculation/core artifact 0.2.0-rc.2.

Changed

  • Made the tablet correction path visible: current records now advertise “View details · edit with signed correction,” and the record sheet shows an explicit “Edit record” action that creates a signed correction rather than rewriting history.

Verification

  • Tablet tests, typecheck, lint, full test suite, tablet bundle sync, Android test/lint, signed release build, APK signature verification, and release-coupling verification completed for the versioned review APK.

0.2.0-rc.8

Current installable APK: `0.2.0-rc.8` (`versionCode 9`). It supersedes the rc.7 review APK while retaining calculation/core artifact 0.2.0-rc.2.

Added

  • Added compliant tablet record corrections that append a signed replacement or deletion event instead of rewriting the entered record in place.
  • Added an audit-history view for superseded and deleted records. Historical values remain visible with a simple strike-through and open read-only, preserving the signed history without an edit path.

Verification

  • Full test suite, typecheck, lint, core artifact build, tablet bundle sync, Android test/lint, signed release build, APK signature verification, and release-coupling verification completed for the versioned review APK.

0.2.0-rc.7

Current installable APK: `0.2.0-rc.7` (`versionCode 8`). It supersedes the rc.6 review APK while retaining calculation/core artifact 0.2.0-rc.2.

Changed

  • Simplified the tablet journey-book header by moving the aircraft tail to the top bar and removing the redundant book and page summary sections.
  • Added compact previous/page/next controls so the tablet displays one journey-log page at a time and opens a newly saved flight on its page.

Verification

  • Full test suite, typecheck, lint, tablet bundle build, and Android release build completed for the versioned review APK.

0.2.0-rc.6

Current installable APK: `0.2.0-rc.6` (`versionCode 7`). It supersedes the rc.5 review APK while retaining calculation/core artifact 0.2.0-rc.2.

Changed

  • The web logbook now opens the tablet-signed archive directly and removes the legacy unsigned-entry path from the aircraft dashboard unless explicitly reached through guarded compatibility code.
  • The signed journey-book view now pairs record-of-time and technical-record cells in one clickable ledger row, shows the immediate superseded revision, and links each line to its complete sign-off history.
  • Tablet book cards and related-record rows now show the signer name directly, and signing PIN/passphrase copy consistently describes the user-scoped signing PIN.

Added

  • Record history now verifies the canonical envelope, visible-signature hash, signer Ed25519 signature, signed server receipt, and aircraft archive link before marking a sign-off verified.
  • Regression coverage for signed-book superseded-line rendering, record-history evidence verification, and the legacy web-write compatibility switch.

0.2.0-rc.5

Current installable APK: `0.2.0-rc.5` (`versionCode 6`). It supersedes the rc.4 review APK while retaining calculation/core artifact 0.2.0-rc.2.

Fixed

  • Admin user creation now accepts either a temporary login ID or an account email in one identifier field.
  • Tablet user enrollment now keeps success and error feedback visible, including when the first enrolled user switches the tablet from setup to the Book screen.
  • Applied the user-scoped signing-PIN schema migration to the authoritative database.

0.2.0-rc.4

Current installable APK: `0.2.0-rc.4` (`versionCode 5`). It supersedes every earlier review APK while retaining calculation/core artifact 0.2.0-rc.2.

Changed

  • Moved Book, New entry, Users, and Sync into a fixed bottom navigation bar so the journey-book content scrolls independently and Android system bars do not cover the application controls.
  • Applied Capacitor-provided safe-area insets above the app header and below the fixed navigation bar, including space for Android gesture navigation.

0.2.0-rc.3

Current installable APK: `0.2.0-rc.3` (`versionCode 4`). It supersedes every rc.2 APK. The calculation/core artifact remains 0.2.0-rc.2 because this release changes the tablet application and release metadata, not calculation behavior.

Changed

  • Reissued the additional-user enrollment fix under a new Android version name and strictly higher version code so Android reliably recognizes it as an update.
  • Added a small application-version label to the tablet footer.
  • Established the release rule that every distributed APK—including a UI-only rebuild or hotfix—must receive a unique application version and a strictly increasing Android versionCode. Previously distributed APK files and checksums must never be overwritten in place.

0.2.0-rc.2

Tablet review APK update. The approved prototype warning and regulatory gates remain unchanged.

Added

  • Administrator-created temporary prototype login IDs for pilots and other users while outbound email delivery is unavailable. These accounts remain explicitly unverified and can enroll a tablet signing key without recording email ownership.
  • Paper-style signed-book rendering on web and tablet, including paginated flight lines, carried-forward airframe totals, technical-record column totals, and signed-record detail.
  • Tablet navigation for Book and New entry, clearer receipt/sync states, automatic outbox draining on launch, reconnect, and retry heartbeat, and linked defect or flight context in the record view.

Changed

  • Tablet layout and responsive controls now match the journey-log workflow more closely while keeping the offline-first signed-record model.
  • Android release metadata advances to version code 3 and version name 0.2.0-rc.2 for an installable tablet update.
  • Hour inputs accept a leading decimal such as .3 and normalize it to canonical tenths.

Fixed

  • The tablet Users enrollment screen remains reachable after the first signer is enrolled, so additional pilots can create their own device-local PIN/passphrase and appear in the signer selector.
  • Android canonical JSON string escaping now matches the TypeScript/ECMAScript implementation and no longer escapes /, restoring byte-identical receipt hashes between the tablet and server.

0.2.0-rc.1

Transport Canada review candidate. This release is not approved to replace the paper journey log.

Added

  • Bundled offline-first Android tablet application with SQLCipher storage, append-only signed commands, b2 per-user/per-device Ed25519 keys, visible signature evidence, trusted-time states, durable outbox delivery, and signed receipt verification.
  • Independent append-only server record plane, tablet provisioning/enrollment/sync APIs, archival projections, record history, defect-number assignment, reconciliation, and tamper evidence.
  • Pinned fixed-point flight-line rules with independently entered flight time and air time, exact warning boundaries, explicit midnight crossing, and airframe totals based on entered air time.
  • Signed create, replacement, tombstone, defect, rectification, maintenance release, independent control check, power-check, header-change, and operator-defined records.
  • Device and user/device signing-key revocation controls with immutable revocation evidence and immediate token invalidation.
  • A single review release profile plus an APK/core/form coupling verifier.
  • Guarded disposable-database acceptance harness and API 34 native instrumentation tests.

Changed

  • The Android application now runs the bundled tablet application instead of loading the hosted web application as its runtime.
  • Existing web-created rows remain unsigned legacy/prototype material and cannot enter the signed review archive.
  • Reboot no longer blocks review signing; it records UNANCHORED_AFTER_REBOOT until the next trusted server attestation.

Deferred and open

  • Interactive reconciliation disposition is deferred to rc.2; rc.1 preserves and shows incidents read-only.
  • S1–S4 representative-hardware evidence, regulatory dispositions, Q-DEP-2 recovery, production key custody, backup/restore validation, v1 upgrade continuity, and every paper-cutover acceptance item remain open.