# Changelog

All notable changes are documented here.

## Unreleased

- Added auditable TOTP time travel using live time, bounded positive or negative period offsets, or a frozen local date/time interpreted in an explicit IANA timezone.
- Added DST gap rejection and earlier/later disambiguation for repeated wall-clock times, with effective local time, UTC instant, Unix seconds and TOTP counter diagnostics.

## 0.1.0 - 2026-08-19

- Initial HOTP, TOTP and OCRA credential laboratory with official RFC-vector coverage.
- Added strict provisioning URI handling, local QR generation/image detection, Google migration, CSV, URI-list and plain-secret PSKC workflows.
- Added bounded WebAuthn CBOR/client/authenticator/attestation inspection and layered assertion verification.
- Added origin-gated, memory-only WebAuthn registration/authentication lab and browser capability diagnostics.
- Added Toolbox SDK 0.2.3 integration, responsive light/dark/system UI, reproducible release packaging, source identity and security/licence documentation.