Beta means the product moves. This is what changed in the platform over the last days, in the order it landed. Every item shipped with the test gates green.
Fixes come from three places: our own multi-model reviews, an assessor-style review of a real certificate, and the people using the beta.
| Day | Change | Module |
|---|---|---|
| 5 Nov | FDA readiness: a new screen checks your workspace live against the 21 CFR 211 sections drug-GMP warning letters cite most (quality-unit release, component testing, deviation scope, out-of-tolerance impact, training, audit-trail review, records requests) and names every gap. | Compliance |
| 5 Nov | Out-of-tolerance impact on product: an instrument found out of tolerance is traced to every batch, lab test, QC result and weighing it touched since its last calibration with every as-found point in tolerance. One click opens a single deviation linked to each affected batch, and a batch cannot be released while it is open. | Calibration |
| 5 Nov | Quality-unit release: in GxP workspaces only a user with the QA role releases batches and material lots, never the person who ran the batch or tested the lot, and every release is e-signed. Workspace admin rights do not count as the quality unit. | Quality |
| 5 Nov | Component release controls: every lot needs an identity test; glycerin and the other high-risk excipients also need a DEG/EG screen, with the verdict computed from both measured values; the supplier CoA is checked against your specification. A failure is never cleared by a later pass, and a failure found after release puts the lot on hold. | Manufacturing |
| 5 Nov | Deviations and nonconformances need a written assessment of the other batches and products that could share the cause before they reach disposition. Each gets a due date, and overdue ones show on a board. | Quality |
| 5 Nov | Training before batch steps: an operator without completed training on every procedure the batch references cannot sign a step. | Manufacturing |
| 5 Nov | Records requests: log an agency request with its deadline and produce an indexed package of the records in scope, with a SHA-256 checksum for every file. Each production is logged. | Compliance |
| 3 Oct | The public demo at demo.metroliq.com is read-only: anyone can walk the product, nothing can be changed. | Platform |
| 1 Oct | Our validation plan, software design specification and functional specification regenerate with every release and go through an e-signed review. | Validation |
| 17 Sep | A refused operation never leaves a signature behind: the change, its e-signature and its audit entry are committed as one write. | Compliance |
| 17 Sep | A deployment that did not happen now fails loudly, and the service reports itself not ready if any required module failed to load, instead of running with a control silently missing. | Platform |
| 16 Sep | Audit room: a customer's auditor gets time-boxed, read-only credentials and works down their own Annex 11, Part 11 and GAMP 5 checklist. Our own gap register is the first thing they see, before any evidence, with the items we have nothing for named outright. | Compliance |
| 16 Sep | Auditors verify us rather than taking our word: recompute any document hash in their own browser, compare the test case-set hash against a run in their own instance, and check the audit chain row by row. | Compliance |
| 16 Sep | Every gate execution is captured as an append-only, hashed record tied to a release and a build identity, and signed into a per-release lifecycle compliance record. A record whose hash does not match its captured output, or whose result contradicts it, is refused. Nothing is backfilled. | Compliance |
| 16 Sep | A defect register with an explicit GxP-relevance classification that is never automatic and always carries a rationale. Each defect cites the release that introduced it and the one that fixed it, and reaches the customers whose own requirements name an affected area. | Quality |
| 16 Sep | Publishing our own supplier procedures restricted to platform operators, and the records corrected to name only the act that actually happened rather than a review and approval that did not. | Compliance |
| 16 Sep | Validation split into two lanes: supplier evidence we produce and publish, and your own validation file that you author and sign. The requirements generator is gone — under EU GMP Annex 11 §4.4 the user requirements are yours to write, and the product now refuses to write them. | Validation |
| 16 Sep | Your validation file added end to end: scope and intended use, your own supplier assessment, a 179-item regulatory requirement library to adopt, edit or exclude, GAMP category rationale, process risk assessment, and a verification strategy with five methods. | Validation |
| 16 Sep | "Not verified, rationale recorded" is a first-class outcome with the same weight as a scripted test. Coverage is reported against risk rather than as a pass rate. | Validation |
| 16 Sep | Leverage of supplier evidence is blocked until your own supplier assessment is signed and effective. | Validation |
| 16 Sep | The validation summary report refuses to be signed while its conclusion is empty, and the product will not write that conclusion. Signing is also refused while a high-impact deviation is open. | Validation |
| 16 Sep | Traceability links are either declared by us in code and machine-verified, or authored by a person. Nothing is inferred. | Validation |
| 16 Sep | A test case that cannot run is declared not applicable and never counted as a pass. The wording heuristic that used to decide this was removed in favour of an explicit flag with a build-failing lint. | Validation |
| 16 Sep | New workspaces require an approved protocol before performance qualification, closing the most common computer-system-validation audit finding. | Validation |
| 16 Sep | A migration for workspaces that already generated packages: legacy documents are reclassified in place with a content note, issued PDFs and hashes untouched, and old generated requirements are offered for you to adopt, edit or exclude rather than silently inherited. | Validation |
| 16 Sep | Publishing our own supplier procedures restricted to platform operators; seven that had reached effective without a valid signature were reverted to draft. | Compliance |
| 16 Sep | A build gate now snapshots every tenant-scoped table, runs the full test suite and fails on any row left behind, so running the suite against your own installed system does not litter your workspace. | Validation |
| 16 Sep | Accessibility: every form control on the new validation screens given a real label; the app passes the audit with no serious or critical findings. | Platform |
| 14 Sep | Instrument capture made honest by default: a real device with no live bridge now refuses the read instead of returning a fabricated value; simulation is opt-in per device. | Instruments |
| 14 Sep | Form rules enforced at record creation and on field edits, not only on transitions; CAPA effectiveness reopening routed through the gated path. | Compliance |
| 14 Sep | Planner apply refuses to overwrite a record changed since the run; the solver is iteration-bounded and reproducible. | Scheduling |
| 14 Sep | Unsigned sensor coefficient sets refused for GxP laboratories; AS2 refusals made uniform so partner existence cannot be probed; deployments answer in-flight writes with a retry rather than an error. | Calibration / MES / Compliance |
| 10 Sep | Low-code QMS form/workflow designer with e-signed sandbox→production promotion; finite-capacity planner; MET/CAL interpreter and Fluke 754 / Beamex MC6 round-trip; serialization conformance workbench with AS2 loopback simulator; EAM spatial/linear assets and inspection routes; LIMS environmental monitoring and result invalidation; performance evidence on the trust page; negative matrix at 87% coverage. | Platform |
| 10 Sep | Adversarial review: privilege escalation via user role updates fixed; e-sign password check on PRT fits; form gate enforces all rule kinds; transactional package promotion; invalidated LIMS results excluded everywhere; record-number and certificate-issue races fixed. Supplier test suite: 482 cases, deep run PASS. | Compliance |
| 10 Sep | Negative-test matrix over all 1,658 API operations (auth, tenant, role, e-sign, lifecycle, SoD) with a CI gate; 222 findings fixed the same day, now 0. | Compliance |
| 10 Sep | Adversarial review of the validation package: SoD bypass, hash-verify and evidence-filing defects fixed; reviewer ≠ approver; content-hashed protocol approval. Supplier test suite: 315 FS items / 400 cases. | Compliance |
| 10 Sep | ANSI/ASQ Z1.9 variables sampling (Form 1/2, s-method) with CI re-derivation; ICH Q1E ANCOVA poolability; instrument-file parser SDK with raw-file vault and chain of custody. | MES |
| 10 Sep | ISA-88 procedural state model, unit allocation, batch-size scaling and a simulated equipment-module command loop. | MES |
| 10 Sep | NTLMv2 for PI Web API / AVEVA Historian with a live TLS-isolation self-test; SAP QM/PP object pack with a sandbox S/4HANA simulator; AI model-risk controls (provider register, e-signed model approval, injection and exfiltration eval suites). | Instruments / Integrations / Compliance |
| 10 Sep | Send-out (subcontracted) calibration with approved-supplier gate and e-signed endorsement, repair authorise-to-proceed with portal approval, loaner pool, customer-witnessed calibration on the certificate, traceability-chain report. | Calibration |
| 10 Sep | GPIB/IEEE-488 instruments through a Prologix GPIB-ETHERNET controller in the on-prem bridge; Z1.4 tables consolidated and re-derived in CI (five defects fixed); DCC validation reports unchecked values and is cross-checked against libxml2. | Instruments / MES / Certificates |
| 10 Sep | Data residency (region pin, egress control, data-location ledger, subprocessor register) and customer-managed keys (envelope encryption, rotation, seal, key-use audit). | Compliance |
| 10 Sep | EPCIS 2.0 capture and query endpoints; CDC bootstrap snapshot and retention with 410 cursor expiry; /export/parquet now writes genuine Apache Parquet. | MES / Integrations |
| 10 Sep | Functional risk defaults re-curated with per-function reasoning and an e-signed reset; OQ suite runs back to back without tripping login limits (260 FS items / 327 cases). | Compliance |
| 10 Sep | Validation Package workspace: GAMP 5 document control with e-signed SoD lifecycle, live-generated VP/SDS/FS/FRS/CS/RTM/TSR/DSR/VSR/RRA, functional risk assessment with Part 11 / Annex 11 / data-integrity / vendor checklists, executable IQ, protocol pre-approval, deviations and retest, ZIP package export, periodic review, ten vendor SOPs. | Compliance |
| 10 Sep | OQ integrity: not-applicable is now an explicit flag at every skip site with a CI lint; historian connectors no longer toggle process-wide TLS verification; LIMS stability report uses the study's spec limits with one regression per storage condition; /export/parquet carries Deprecation and Sunset headers pointing at /export/csvgz. | Compliance / Instruments / MES |
| 10 Sep | WCAG 2.2 AA programme: axe 831 → 0 across 113 scans (app, modals, both portals), tagged accessible PDFs, VPAT 2.5, CI accessibility + contrast gate. | Compliance |
| 10 Sep | Supplier test suite extended by 90 FS items / 107 cases for the round-four modules — now 226 FS items / 284 cases; deep run PASS 284/284. | Compliance |
| 10 Sep | Training-competence gate: a curriculum item referencing a calibration procedure requires a completed training record before creating or signing the calibration. | Calibration |
| 10 Sep | Full ANSI/ASQ Z1.4 acceptance sampling with automated switching rules. | MES |
| 10 Sep | PI Web API, AVEVA Historian and Kepware connectors, critical-tag data-gap exceptions and a fail-closed buffer policy. | Instruments |
| 10 Sep | PEPPOL e-invoice delivery through an access point, recipient lookup, delivery tracking and an inbound supplier-invoice inbox. | Pipeline |
| 10 Sep | LIMS depth: sample login and aliquots, competence- and calibration-gated worksheets, reagent lot expiry control, ICH Q1E stability. | MES |
| 10 Sep | Serialization exchange: EPCIS import and receiving reconciliation, e-signed serial lifecycle, returns verification, partner delivery, regulatory status tracking. | MES |
| 10 Sep | SAP, NetSuite and Dynamics purchase orders, goods receipts, maintenance orders and manufacturing work orders. | Integrations |
| 10 Sep | BI export: CDC change feed, warehouse and lake destinations, schema versioning and a data dictionary. | Integrations |
| 10 Sep | DCC schema validation, XML digital signatures and CMS-signed certificate PDFs; DCC schema-compliance fixes. | Certificates |
| 10 Sep | Release impact analysis and upgrade packs, SIEM audit streaming, integration-health dashboard, certificate-expiry alerts, SBOM/SAST/secret scanning. | Compliance |
| 10 Sep | Calibration content packs, competitor migration importers, multi-week capacity planning, and EAM warranty, FMECA, capital projects and strategy library. | Calibration / Scheduling / Maintenance |
| 10 Sep | ISA-88 batch execution: procedural recipes, equipment-state gating, phase hold points and golden-batch comparison | Manufacturing |
| 10 Sep | Customs documents for cross-border shipping: declarations, HS and part defaults, commercial invoice, provider-mapped customs objects | Service pipeline |
| 10 Sep | Supplier test suite now spans every module: 127 FS items, 177 automated OQ cases with negative tests for every gate; the runner takes your signing password so e-signed steps run for real; latest run 177/177 | Compliance |
| 10 Sep | SCORM/xAPI course player, HRIS sync (Workday, ADP, UKG Pro, CSV), translation review and certification, four new languages | Documents & training |
| 10 Sep | MES quality: QC sampling with Z1.4, OOS workflow, material disposition, CoA, LIMS export/import and GS1 serialization with EPCIS. | MES |
| 10 Sep | On-prem instrument bridge with device pairing, eight new fixture-tested drivers and calibrator-sourcing auto-run. | Instruments |
| 10 Sep | Native mobile readiness: encrypted offline storage, MDM policy, remote wipe, native scan and push, CI build pipelines for the Capacitor shell. | Field service |
| 10 Sep | NetSuite, SAP and Dynamics 365 accounting connectors, ISA-95 B2MML import/export, and edge-connector hardening (OPC-UA certificates, bounded buffer, HA, mTLS). | Integrations |
| 10 Sep | Tax providers (Avalara/TaxJar), exemption certificates and PEPPOL/Factur-X e-invoicing. | Pipeline |
| 10 Sep | Full vehicle-routing optimiser (capacities, breaks, territories, skills, pins, re-optimisation) in Dispatch. | Field service |
| 10 Sep | Barcode/QR scan gating for perform, standard selection, receiving and crib custody, plus a label designer with PDF/ZPL output and a print queue. | Calibration |
| 10 Sep | AI governance policy, redaction and evidence; OData and CSV.gz BI export; e-signed GDPR erasure and DSAR; accessibility pass to zero axe violations on the top screens. | Compliance |
| 10 Sep | Predictive maintenance analytics: Weibull reliability, health scores, remaining useful life and anomaly-driven maintenance suggestions. | Maintenance |
| 10 Sep | Automated security-scan evidence, SOC 2 / ISO 27001 controls matrix, byte-faithful PDF renditions, clone fix. | Security |
| 9 Sep | Multi-language UI and bilingual calibration certificates (English, Spanish, French, German), per-workspace wording overrides | Workspace |
| 9 Sep | Offline field mode now has a real local database (IndexedDB), delta sync and conflict resolution: pack a job, work with no signal, sync and sign when back | Field service |
| 9 Sep | Application hardening: security headers, rate limiting and tightened request-size limits across API and web app. | Security |
| 9 Sep | OpenAPI 3.1 spec, Redoc docs, Postman collection and SDK stubs generated live from the API. | Integrations |
| 9 Sep | Training curricula: role-targeted assignment, retraining rules, versioned quizzes, gap and transcript reporting. | Documents |
| 9 Sep | Controlled documents now carry real source files (Word/PDF) with automatic renditions, redlines, distribution tracking and binders. | Documents |
| 9 Sep | Scale-in-the-loop dispensing (tare/gross/net capture, potency-adjusted targets, partial containers, reconciliation) and camera/GS1 barcode verification in electronic batch records. | MES |
| 9 Sep | Change control now runs impact assessment → tasks → effectiveness → notification with enforced gates, AI-assisted draft assessment and a one-click package. | Quality |
| 9 Sep | Review-by-exception batch release, seven new batch step types and in-process SPC with Nelson-rule detection and Cp/Cpk/Ppk. | MES |
| 9 Sep | Sandbox workspace cloning, site-scoped roles, OAuth2 client-credentials tokens and Web Push notifications. | Workspace |
| 9 Sep | Medical-device pack: design controls with DHF and trace matrix, ISO 14971 risk management, complaint reportability with eMDR/MIR export, APQR generation. | Quality |
| 9 Sep | Edge & sensors: OPC-UA/MQTT/Modbus TCP ingestion bound to meters, environment, batch steps, CBM and SPC, with alarms and simulation for validation. | Instruments |
| 9 Sep | Documenting-calibrator and MET/CAL bridge: task-package export, results import with reconciliation and e-signed apply, capture-policy auto-run with Type A uncertainty, driver test harness and simulated devices. | Instruments |
| 9 Sep | Supplier qualification lifecycle, SCAR workflow, isolated supplier portal and incoming inspection with automatic NCR/SCAR creation. | Quality |
| 9 Sep | Maintenance: labour timesheets, PO approval limits with three-way match, job-plan checklists with part reservations, cycle counts/ABC/reorder math, LOTO permits, downtime KPIs. | Maintenance |
| 9 Sep | Commercial pricing: customer price lists and tiers, multi-currency, tax rules with EU reverse charge, consolidated invoicing, credit holds and dunning. | Pipeline |
| 9 Sep | Carrier shipping (EasyPost/Shippo), RMA returns and custody-scan tracking, with a certificate gate on outbound shipments. | Pipeline |
| 9 Sep | Stripe Checkout payments: online invoice pay, deposits, pay-by-link and provider reconciliation. | Pipeline |
| 9 Sep | QuickBooks Online and Xero accounting sync: connect once, map customers and items, invoices, credit notes and payments push automatically with an error-recovery workbench. | Integrations |
| 9 Sep | ITS-90 and thermocouple tooling, loop calibration, MSA-4 studies, family interval analysis, adjustment disposition and balance qualification under Metrology Lab. | Calibration |
| 9 Sep | Field dispatch v2: map-based route optimisation, skill-matched assignment, SMS appointment notifications, on-site signature capture and service-contract entitlements. | Field service |
| 9 Sep | Cal Builder drafts a measurement form straight from the product library when a catalogued manufacturer + model is given: typed accuracy and checkpoints, no datasheet needed, no AI guesswork; clear guidance when the model is not catalogued | AI / Calibration |
| 9 Sep | Integrations: CSV/JSON file upload for bulk imports (with confirmation), CSV export through the same mapping, run history per integration, connection credentials stored masked; Beta scope stated in the builder (live scheduled sync not yet enabled) | Integrations |
| 9 Sep | Names with apostrophes no longer break inline actions on client, asset and order pages | Platform |
| 9 Sep | MES: release gates (review state, all steps, line clearance, quantities), immutable executed steps, e-signed BOM-checked dispensing, unique lots, master-record snapshot, concurrency detection | MES |
| 9 Sep | QMS: one-step transition matrix, closure gates for NCR/deviation/complaint, e-signed effectiveness, no double escalation, field-level audit deltas | Quality |
| 9 Sep | CMMS: work-order closure gates, PM skips inactive assets, condition-based rules tenant-validated and error-visible (a swallowed error had silenced them) | Maintenance |
| 9 Sep | Product library search 6 s → 0.02 s; the equipment-specs service no longer restarts on dropped database connections | Platform |
| 9 Sep | Role-aware UI: admin-only settings, security, validation runs and round starts are hidden or disabled for technicians, approvers and viewers | Web app |
| 9 Sep | Outbound URL guard for webhooks, chat channels and SSO discovery (private, loopback and metadata addresses refused at save and at send) | Security |
| 9 Sep | Login returns to the page you left in that workspace | Web app |
| 9 Sep | Demo intake form logs UTM, landing page, scene reached and time on deck; stats page shows submissions and bookings | Platform |
| 9 Sep | Contact form and demo scheduler on the website; bookings feed an ICS calendar | Website |
| 9 Sep | Sensitivity coefficients derived symbolically from the measurement equation with a numerical cross-check; formula mode for spec expressions | Uncertainty |
| 9 Sep | Model-based Monte Carlo with a reproducible seed, correlated inputs via Cholesky, shortest coverage interval | Uncertainty |
| 9 Sep | Job workspace: reference standards chosen per job with validity checks, points added and removed, environment captured inline | Calibration |
| 9 Sep | Independent approval setting: the performer cannot approve their own work | Compliance |
| 9 Sep | Certificate carries received date, condition and amendment history; environment printed in words; U to two significant figures | Certificates |
| 9 Sep | CONDITIONAL verdict wording states that the specification is met but not accepted, with the probability of non-conformance | Calibration |
| 9 Sep | DCC completeness: revision, issue date, address, customer, tolerance limits, TUR and decision per point, procedure, influence conditions | Certificates |
| 9 Sep | Reference standards record k, coverage probability, provider and calibration date; specifications record document, revision and clause | Assets |
| 9 Sep | Unknown fields on quality records are rejected with the list of accepted fields instead of being dropped | Quality |
| 9 Sep | Modal-flow gate: every dialog closes on navigation; eleven flows walked on every build | Web app |
| 8 Sep | Ten overnight hardening waves: PFA/PFR per point, enforcement gates, webhooks, AI provenance on certificates | Platform |
| 8 Sep | Local-date handling fixed across certificates (dates no longer shift by time zone) | Certificates |
| 7 Sep | Vernier brand applied to the site, the app and the narrated tour; vendor names removed | Website |
Every change runs the gates before it is deployed: 272 metrology checks, 89 isolation probes, 73 certificate-fidelity checks, 54 UI routes and 11 modal flows. Our supplier verification suite is executable against your own instance, so re-checking it after a release in your workspace is a run, not a project.
The record does not move when the product does. The audit trail, the signatures and the certificate revisions are immutable by construction; a fix to a renderer produces the same certificate revision from the same data.
The tour runs the working platform, not a mockup. Pilot on your own instruments with your own imported history — we set it up with you, and fixes ship in hours and days, not release cycles.