Changelog

Product release history for Carpe Intel.

v6.5.0 — 2026-03-06

API Sandbox for ClaimsX Monitoring + Investigation

  • API Sandbox: New interactive sandbox at /sandbox for testing ClaimsX Monitoring and Investigation API endpoints with simulated responses.
  • Monitoring API: All 6 endpoints — start, update, get alerts, stop, resume, and trigger scenario — with scenario-based responses (empty, standard alert, standard + prior alerts).
  • Investigation API: All 3 endpoints — start, order, get report — with scenario-based responses (empty, standard report, standard + prior reports).
  • Callback Reference: Read-only tab showing monitoring and investigation callback payload structures with multiple examples (default, with content, no-hit).
  • Developer Tools: Auto-generated cURL commands, copy-to-clipboard, sample API keys, JSON syntax highlighting, status code badges, simulated response times.
  • Access Control: Sandbox nav link and page restricted to authorized Carpe Data users only.

v6.4.0 — 2026-03-06

UI Overhaul — Dark Mode Fix, Color System, Analysis Redesign

  • 🌙 Dark mode fixed: Root cause was Tailwind v4 requiring @custom-variant dark in CSS — now properly configured. All dark mode classes work correctly.
  • 🎨 Color system: Replaced all custom hex values with standard Tailwind slate palette across all result components. Consistent, maintainable.
  • 📊 Analysis tab redesigned: New stat bar summary (flags count, contradictions, image flags, overall risk), compact list layout replacing noisy 2-column grids, tighter information density for claims investigators.
  • 🔍 Raw Data tab: People search / lead gen / public records sites now filtered by default. Relabeled "People Search & Lead Gen" with explanatory note. 20+ additional domains added to blocklist.
  • 🧭 Navbar: Cleaner slate palette styling, improved dark mode styling.
  • 🗂️ Tabs: Simplified underline-style tab bar, proper dark mode contrast.

v6.3.0 — 2026-03-06

AI Claimant Interview (VAPI Phone Calls)

  • 📞 VAPI Claimant Interview: New section on investigation results page. Investigator clicks "Call Claimant" to initiate an AI-conducted outbound phone call via VAPI (+1-805-622-2737).
  • OSINT-Derived Questions: AI generates 3 targeted questions per call — 1 baseline claim question, 1 OSINT-informed probing question (based on social media findings and claims flags), and 1 consistency check. Questions are generated fresh per investigation before each call.
  • Automated Interview: Judah (Opus 4.6 via VAPI) conducts the interview, asks questions conversationally, admits it's a bot if asked directly, and ends politely after 3 questions.
  • Call Outcomes Stored: Full audio recording + transcript saved. Post-call AI analysis compares claimant answers against OSINT findings, flags contradictions, and rates credibility (High / Medium / Low).
  • UI: 4-state collapsible card — no interview, in progress (polls every 10s), completed (transcript + audio player + AI analysis), failed. Phone number pre-filled from investigation subject, investigator-overridable.
  • Webhook Handler: VAPI end-of-call-report webhook triggers AI analysis automatically when the call ends. Status updates tracked in real time.
  • Supabase: New interviews table stores all call data (investigation_id, vapi_call_id, phone, questions, status, transcript, recording_url, ai_analysis).

v6.2.0 — 2026-03-05

User-Scoped Dashboard

  • Scoped Investigations: Dashboard now shows only YOUR investigations by default.
  • Admin Toggle: Admins can toggle "Show All" to view all users' searches.
  • User Column: New "User" column visible in admin view showing who ran each search.
  • Ownership Tracking: Investigation ownership tracked automatically on creation.

v6.1.0 — 2026-03-05

Data Checkboxes, Platform Tier Split & Re-Run Repopulate

  • ✓/✗ Feedback on All Data: Checkboxes (correct / wrong) added to every data element — education entries, work history, addresses, email addresses, phone numbers, and individual web results. Feedback stored via the existing feedback API with a new type + index schema for granular data-item tracking.
  • Primary / Secondary Social Profile Split: Social profiles section now groups by platform tier instead of confidence level. Primary platforms (LinkedIn, Instagram, Twitter/X, Facebook, YouTube, TikTok) shown prominently with full cards. All other platforms collapsed by default under "Other Profiles (N)" toggle.
  • Re-Run Repopulate (In-Place): "Re-run with discovered details" now updates the investigation in place instead of redirecting to a new form. Calls the rerun API with enriched subject data, resets the UI to processing view, and polls for completion — new results appear automatically when done.
  • Emails & Phones in Subject Summary: Subject summary card now displays all email addresses and phone numbers with per-item feedback buttons.
  • Rerun API Enhancement: /api/investigations/[id]/rerun now accepts an optional subject field to update the subject with discovered data before re-processing.

v6.0.0 — 2026-03-04

Identity Resolution: Browser API + Facial Recognition + Security Hardening

  • 🌐 Bright Data Browser API: Second-pass enrichment using Bright Data's Scraping Browser (Playwright over CDP). Profiles missing bio, headline, location, or photos after Datasets API enrichment are now fetched via a full headless browser — bypassing anti-bot protections on LinkedIn, Instagram, Twitter/X, and Facebook. Extracts OG tags, JSON-LD, and platform-specific selectors (name, headline, bio, location, profile image, website). Cost-controlled: top 3 candidates only.
  • 📸 Facial Recognition Matching: Optional subject photo upload on investigate form. Vision AI (Claude Opus 4.6) compares reference photo against discovered profile photos. Score adjustments: face match +0.25, face mismatch -0.30, uncertain no change. Results shown as badges on each profile: ✅ Face Match, ❌ No Match, ⚠️ Uncertain. Photos stored in Supabase Storage, client-side resized to 1024px.
  • 🔒 CSP Hardening: Fixed all critical/high Content-Security-Policy findings from CISO audit. Removed unsafe-eval, replaced wildcard https: in img-src with explicit allowed domains, scoped Google Maps to specific API paths (JSONP bypass fix), added upgrade-insecure-requests and report-uri directives.
  • 🛡️ Database Security: Enabled Row-Level Security (RLS) on all 6 public Supabase tables. Added service_role_all policies. Anon access now blocked on all tables.
  • 📷 Subject Photo Upload: New file input on investigate form (image/jpeg, image/png, image/webp, max 5MB). Canvas API resize, preview thumbnail, Supabase Storage upload to subject-photos bucket. Non-blocking — investigation starts immediately while photo uploads in background.
  • 🎯 Profile Photo Extraction: Browser API reliably fetches profile image URLs from LinkedIn (CDN direct links), Twitter/X, Instagram, and Facebook — enabling facial matching on profiles that previously had no photo data.

v5.9.0 — 2026-03-03

Ian's Six: Deep Fraud Intelligence

  • 🕵️ Synthetic ID Detection: Heuristic-based identity fabrication analysis. Checks digital footprint age, identity DB consistency (PIPL + PDL), employment/education gaps, profile age indicators, and public records presence. Scores 0-100 with risk levels. No SSN required.
  • 🌐 Dark Web / Breach Search: Checks subject emails against known data breach databases (HIBP, breach directories) via free Serper-based search. Flags breach count, names, and exposed data types.
  • 🔗 Association Mapping: Maps connections between claimant and other parties — legal/attorney connections, address co-residents, lawsuit co-parties, and social media tagged contacts. Flags suspicious relationships (same address, shared legal proceedings).
  • 💰 High Net Worth Flag: Detects executive titles, high-value industries, wealth indicators, business affiliations. Confidence levels: unlikely → possible → likely → confirmed with estimated range.
  • 👤 Public Figure Flag: Checks Wikipedia presence, news footprint, follower counts, verified accounts, political/government roles. Categorizes as politician, executive, media, athlete, or other.
  • 🔍 People Data Labs (PDL) Integration: Third identity resolution source running in parallel with PIPL + Serper. Returns full work history with dates/companies/industries, education details, social profiles, skills, and interests.
  • 📊 Admin Analytics Dashboard: New /admin/analytics page with source performance, enrichment hit rates, social platform discovery, claims flags by type/severity, performance by tier, input quality metrics, AI summary stats, score distribution, and user activity tracking.
  • 📖 Investigator How-To Guide: Collapsible onboarding guide on /investigate explaining what Carpe Intel searches, how AI analyzes data, what you get, and investigation tier descriptions.
  • 🪄 Magic Upload Fix: PDF/image upload now surfaces errors instead of silently failing. Added addresses[] and claimDescription extraction.
  • 📅 Date of Incident: Moved from Subject Information to Claim Details section where it belongs.
  • 💼 LinkedIn Cleanup: Work experience deduped by title+company, filters out snippet-garbage (sentences in company names), capped at 2 most recent entries.
  • 📈 Source Tracking: Every investigation now logs which sources (PIPL, PDL, Serper, Bright Data, IDCrawl) contributed profiles and high-confidence matches.

v5.7.3 — 2026-03-03

Multi-Address Input + Masked Discovery Safety

  • 📮 Multiple Addresses: Create-investigation form now supports entering multiple addresses (primary + additional). Persisted as subject.addresses: string[] while keeping subject.address for backwards compatibility.
  • 🧾 Results Address Summary: Subject Summary shows primary address plus a “+N more” expandable list for additional addresses.
  • 🛡️ Re-run Discovery Redaction: “Re-run with discovered details” now never auto-prefills masked/redacted values (anything containing ***/**** or xxx/XXX). Masked discovered emails like sarahjoh****@gmail.com are ignored for prefill.

v5.6.0 - 2026-03-03

Quality Hardening & Markdown Tables

  • 🐛 Claims Flags Fixed: Root cause: Claude returns JSON inside markdown code fences - parser was only looking for bare arrays. Now strips fences, extracts objects, and handles all response formats. Claims flags verified working (7 flags on test investigation).
  • 📊 Markdown Tables: AI dossier tables now render as proper styled HTML tables with headers, hover rows, and responsive overflow. Previously showed raw pipe syntax.
  • 🔄 Re-run with Discoveries: After investigation completes, "Re-run with discovered details" button feeds back discovered emails, handles, and employers for higher accuracy on a second pass.
  • 🎯 Confidence v2: Common name penalty - Sarah Johnson, John Smith etc. capped at 0.55 confidence when no corroborating email/phone/DOB provided. Reduces false positives.
  • 🔢 Float Precision: Fixed 0.35000000000000003 appearing in confidence scores. Root cause: JS floating-point arithmetic in Bright Data minimal fallback path.
  • 🚫 Reddit NSFW Filter: Rejects adult content, NSFW, and OnlyFans snippets. Requires subject's last name in snippet or URL.
  • 🖼️ Image Analysis (Beta): Vision AI analyzes social media photos for physical activity contradictions. Shown below Claims Flags with Beta badge.
  • 🔍 Deeper Serper Queries: Added GoFundMe, arrest/fraud/lawsuit, condition-specific, DOB year, and address searches. Enhanced news with criminal keywords.
  • 🏠 Hero Simplified: Dropped "Carpe Intel" title text. Fixed subtitle wrapping. Cleaner, more enterprise look.

v5.5.0 - 2026-03-02

Timeline, Interview Prep & Claim Context

  • 📅 Activity Timeline: Visual timeline plotting social media posts against claim dates. Posts after Date of Incident highlighted in red. DOI marker prominently displayed.
  • 📋 Interview Preparation: AI-generated interview questions tailored to investigation findings. 10 targeted questions with evidence citations and red flags to listen for.
  • ⚠️ Evidence Preservation Banner: Warns when public profiles are detected that could be deleted. "Preserve Evidence" CTA for future archival feature.
  • 📝 Claim Description Field: New optional text area in Claim Details - free-form claim narrative that feeds directly into AI analysis for more targeted dossiers.
  • 📊 Score Renamed: "Risk Score" → "Online Presence Score" with coverage-based interpretation. Prevents confusion with fraud risk scoring (coming in v6).
  • 🔍 QA Cycle: 3 diverse subjects tested (common name, known person, celebrity). Identified and fixed confidence scoring gaps and score interpretation issues.

v5.4.0 - 2026-03-02

Ask the Analyst + Full Dossier Mode

  • 💬 Ask the Analyst: Chat with a senior OSINT analyst about any completed investigation. AI has full context of all social profiles, web results, claims flags, public records, and the intelligence brief. Suggested starter questions included.
  • 📋 Full Dossier Mode: AI intelligence brief expanded from 3-4 paragraphs to a 10-section deep-dive investigation report: Executive Summary, Subject Profile, Digital Footprint Analysis (per-platform), Public Records, Claims-Relevant Findings, Claims Flags, Identity Verification, Risk Assessment, Recommendations (with interview questions), and Evidence Appendix.
  • 📄 Professional Report: HTML report completely redesigned - branded Carpe Data header, executive summary box with score, structured sections, public records breakdown, print-ready with CONFIDENTIAL watermark.
  • 🏠 Landing Page: Enterprise-grade hero section, stats bar, how-it-works visual. Looks like a product Travelers would pay for.
  • 🎯 Results Polish: Cleaner confidence badges, section icons, collapsed web/news/images by default, status bar with completion time.

v5.3.0 - 2026-03-02

Deep Enrichment & Intelligence Upgrade

  • 🔧 Bright Data Fix: Found and fixed the root cause - discover_by=url param was being rejected by Datasets API. Profiles now return real followers, bios, posts, profile images.
  • 🎯 Real Confidence Scoring: Name matching + URL validation replaces fake 100% scores. LinkedIn with matching slug = 0.9, unrelated Twitter handle = 0.15. Profiles now grouped by actual match quality.
  • 📊 Confidence Badges: GREEN (HIGH ≥70%), YELLOW (MEDIUM ≥40%), GRAY (LOW <40%) badges on every profile card. Low-confidence matches collapsed by default.
  • 📝 AI Summary Upgrade: Collapsible report with gradient fade, correct report date, horizontal rules, blockquote support. Public records (alumni, business, property, relatives) now fed into the intelligence brief.
  • 🔍 URL Validation: Rejects search/directory pages masquerading as profiles (e.g., Facebook "People named X" pages filtered out).
  • 🏠 Public Records → AI: Alumni history, business affiliations, property records, and relatives now included in AI summary prompt for richer analysis.

v5.2.2 - 2026-03-02

Results Page Polish

  • Confidence-based grouping - social profiles split into High (full cards), Medium (compact list), and Low (collapsed toggle) tiers to reduce noise
  • AI Summary formatting - replaced broken markdown renderer with proper line-by-line parser supporting headers, lists, bold/italic, code, and links
  • Risk Score explanation - color-coded description below score circle with breakdown of scoring components
  • Best profile photo - hero avatar displayed at top of Subject Summary card when available
  • Download/print report - View Report and Print Report buttons restored above results

v5.2.1 - 2026-03-02

Results & Report Enhancements

  • Public Records section on results page - alumni, business affiliations, relatives, property, discovered emails
  • LinkedIn experience & education timeline display on results page
  • Profile avatar images from Bright Data in social profile cards
  • Confidence score display fix - correct 0-1 → percentage conversion
  • Branded PDF/HTML report with public records, LinkedIn details, confidential watermark

v5.2.0 - 2026-03-02

Deep Enrichment & Public Records

  • Bright Data Structured APIs - Instagram, LinkedIn, Facebook, Twitter/X, YouTube profiles now return full structured JSON (followers, bios, posts, experience, education)
  • Public Records Enrichment - IDCrawl aggregator, business affiliations, news/media, property records, court/legal, alumni history, relatives, nonprofits
  • 8 parallel public record searches per investigation
  • Instagram Posts + Facebook Posts - recent posts pulled via dedicated APIs
  • AI Summary timeout fix - extended to 150s for Opus 4.6 detailed reports

v5.1.0 - 2026-03-02

UX & Pipeline Upgrades

  • Logo fix - dual PNG/SVG for light and dark mode visibility
  • Red favicon - Carpe “C” on red background
  • Magic Upload - PDF, images, and document file upload (not just text paste)
  • Re-run with tier selection - dashboard dropdown: re-run as Instant, Thinking, or Pro
  • Upgrade banners - completed Instant investigations offer “Upgrade to Thinking”; Thinking offers “Upgrade to Pro”
  • Beefed-up search queries - 5+ query variations per investigation, quoted names, name+city, name+employer
  • Deeper Bright Data extraction - nitter fallback for Twitter, mobile Facebook, snippet fallback
  • New scoring formula - composite: web presence + profiles + richness + claims flags + images
  • 7 social platforms - added YouTube, Reddit, TikTok discovery

v5.0.0 - 2026-03-02

Clean Rebuild

  • Complete architecture rebuild with Codex 5.3
  • Railway worker for background investigation processing (no timeouts)
  • Supabase Realtime queue architecture
  • 4 investigation tiers: Score, Instant, Thinking, Pro
  • 16-step investigation pipeline
  • Parallel social profile processing
  • Google Places autocomplete for address input
  • Magic pre-fill from pasted text (AI extraction)
  • Dark mode with persistent toggle
  • PDF/HTML report export
  • Professional claims flag analysis
  • AI Intelligence Brief (concise + detailed modes)