Changelog

• 2026-07-26 — Compare Models: heuristic change classification (IDENTICAL/METADATA_ONLY/LOCALIZED_WEIGHT_EDIT/FINE_TUNED/ARCHITECTURE_MODIFIED/INCOMPATIBLE) with a separate observed-pattern (measured) vs. likely-origin (inferred, always "consistent with") split, a global change summary across the whole file, a per-block change map, and richer per-tensor stats (RMS, percentiles, cosine similarity, difference-distribution histogram).
• 2026-07-25 — Compare Models: async per-file upload with live progress/SHA-256, per-plan monthly limits (Free 10, Pro 100, Enterprise unlimited), Compare History, gated behind a free account. Dashboard: Scan Models and Compare Models now run inline (upload + report in the same page, including Hugging Face repo scanning) instead of navigating away. Routine security and infrastructure hardening.
• 2026-07-01 — ONNX: large-graph handling always renders the graph view; scan-coverage row for external-data cases; "Incomplete" confidence label for partial scans; severity triage that distinguishes known-vendor vs. unknown-origin custom ops; external-data dedup finding.
• 2026-06-29 — ONNX: Operator Risk Profile, Shape Risk Analysis, and Initializer Integrity cards (control flow, memory amplification, dynamic-dim risk, NaN/Inf sampled scan, duplicate/unused/shadowed initializers). Per-op CVE advisory matching (only flags CVEs for ops actually present in the graph, not the whole opset). Realistic runtime-compatibility notes for TensorRT/OpenVINO/CoreML (conversion required, opset risk, dynamic batch). Externalized all security reference data (CVE/SPDX/arch/op-risk/vendor-domain lists) to versioned JSON files.
• 2026-06-28 — ONNX: dedicated Custom Operators & Domains card, external-data security checklist (10 explicit checks), shape-bomb / oversized-initializer / dynamic-axes detection. GGUF report polish (bits-per-element field, architecture verification labels). Report generator renamed (internal IP-conflict cleanup, no functional change).
• 2025-10-09 — Added FAQ, How it works, Security & Privacy, and Supported formats pages. Unified footer, dynamic CVE update date on scan page.

This list covers user-facing changes; internal refactors and test-only commits are omitted.