What changed
Every release is an item here, with its commit. Once a month a longer piece with what we measured and what went wrong.
Once a month we write down what the platform did, in numbers we measured ourselves, and what broke along the way. This is the first one, covering the build-up from 13 to 22 September 2026. Nothing here is a projection.…
The framework behind the platform went from Next 16.2.10 to 16.3.5 after a set of critical vulnerabilities (among them a bypass of the request proxy and remote code execution through image optimisation). After the upgra…
Twenty-three questions people ask a model before they pick a host ("where do I host a Lovable app with a database in Europe", "why is my app slow after being idle", "is there an MCP server for publishing a website") eac…
The shared database server for App customers and the storage for trial sites are now reachable only through private endpoints; public access is closed, and the rule that allowed any cloud service is gone. Every night a…
When the platform cannot answer, visitors now see our own page, in Dutch and English, instead of a bare error from the cloud provider; API and MCP calls get JSON. The status code stays what it was, so monitoring and age…
The contact form module accepted submissions only on the trial address and refused them on a customer's own domain with a 403. Found while writing the question page about email, fixed the same day: the module now recogn…
Three public repositories under the GitHub organisation dorelli-cloud, all generated from the platform's source: cli (the command line tool and local MCP server, npx github:dorelli-cloud/cli deploy), action (the GitHub…
Reports to [email protected] are now handled by a Trust and Safety process with a fixed rulebook. A single report never takes a site offline: that needs two independent signals, for example a report plus a rescan that…
When you keep a site, you now pick your domain name in the payment form. The form checks whether the name is free and shows what the extension costs; standard extensions (.nl, .com, .eu, .be, .org, .dev and more) are in…
Bottom right on every page there is now a chat that answers from the documentation, nothing else: it quotes the article it used and says when it does not know. Want a person? One click turns the conversation into a tick…
The architecture page shows how the platform is built: which parts there are, on which cloud they run, and how a request travels from your visitor to your site. The diagram is generated from the same model the code is c…
On the Agents tab of a claimed site you can now create keys for a coding agent, each with only the rights you choose: publish, read status, read logs, read form counts, read the audit log, read limits. Every site has a…
The status page moved to status.dorelli.cloud, served from the edge, separate from the platform it reports on. When the platform is down, the page still loads and says so, with the last measurement it saw. Without measu…
Every page of the platform now carries a Content-Security-Policy with a per-request nonce. Trial sites and sites on their own domain get a different, closed policy: your HTML runs in its own sandbox and can never borrow…