- Added new secret rotation integrations (Datadog API keys, Snowflake user key) and support for pre‑hashed RSA signing for HSM PKCS#11 signers.
- Introduced optional trust‑anchor chain verification for client TLS certificates, metadata search, and a deep‑link for PAM access.
- Improved infrastructure with FK indexes for permission queries, enhanced telemetry and audit‑log handling, and UI/docs refinements.