What changed, and what has not shipped yet.

Added

• Static launch, documentation, pricing, policy, security, status, and contact pages.
• An isolated interactive demo backed by exactly 150 synthetic parcel fixtures.
• Hexclave authentication entry points and protected account/admin foundations.
• Versioned subscription entitlements, API health/readiness, and OpenAPI 3.1 contract.
• Adversarial tests for isolation, authorization, CORS, input validation, and rate limiting.

Security

• The demo service has no production database connection.
• Administrator permission is checked by the API.
• Errors include request IDs without leaking credentials or dependency secrets.

Not released

Production parcel endpoints, nationwide coverage, live API keys, billing checkout, metered usage, webhooks, and the administrative inbox remain unavailable until their release gates pass.