Changelog

What changed and when.

Versioned release notes for the ModelxcelPro add-in and the modelxcel.com site. Subscribe via the newsletter to get major releases in your inbox.

  1. minor2026-07-07

    Model Sentinel declared checks are now documented.

    • addedModel Sentinel now documents Declare a check for narrow gap checks: one selected cell for a cell expectation, or two selected cells for a reconciliation with an explicit user-supplied tolerance. Declared checks are stored in .mxchecks, labelled as user-declared rather than the model's own, and never inserted into the workbook.
    • changedCertificate, Evidence Pack, file-type, audit-overview, and persona copy now reflect the shipped adopted-versus-declared Sentinel split, including the declared-check count in Sentinel proof summaries when present.
  2. minor2026-07-07

    Proof crypto, Model Sentinel, and Circular Refs are now documented.

    • addedModel Sentinel documents the shipped Audit command that adopts a workbook's own audit sheets, named check cells, inline check rows, and key-results register as live pointers. It evaluates on demand, baselines pass/fail state, alarms only on new failures, and never changes the workbook: no edits, no unhiding, no recalculation, and no macros. Sentinel snapshots feed Proof evidence, and the .mxchecks sidecar rides in the Evidence Pack when present.
    • addedCircular Refs documents the shipped Audit command that scans every formula for circular-reference loops, including loops Excel can resolve silently when iterative calculation is on. The scan is read-only; Probe Convergence recalculates only after explicit consent; Break Loop saves the original formula to .mxbreaks and restores through Restore Broken, not Ctrl+Z.
    • addedCertificate JSON exports now document the signed envelope: a.mxcert.json export can write a sibling .mxcert.signed Ed25519 envelope that a recipient verifies offline without Excel or ModelxcelPro. PDF and branded Excel certificate formats remain self-hashed, and an envelope-write failure downgrades to a warning instead of blocking the bare JSON export.
    • addedSeal Ledger signs the ledger's current head hash with the reviewer's Ed25519 key, creating an evidence seal over every record so far. Verify Ledger recomputes the hash chain and checks those seals; records appended later are covered by the hash chain until the next seal.
    • addedEvidence Pack packages the certificate JSON, its .mxcert.signed envelope, a sealed .mxproof ledger snapshot, standalone Node verifiers, .js.txt survivability twins, and a README for offline review. Signer identity is self-asserted, fingerprints must be shared out of band, and timestamping, organization identity binding, and revocation remain future work.
  3. minorv2.1.0

    Replay Proof ships an Ed25519-signed envelope sidecar.

    • addedReplay Proof .mxreplay.signed envelopes — every.mxreplay export now writes a sibling .mxreplay.signed file with a real Ed25519 asymmetric signature (BouncyCastle Ed25519Signer) over the canonical replay certificate plus envelope metadata (algorithm, canonicalization ID, key ID, public key, signature, signed timestamp, signer name). The public key is embedded in the envelope so any third party can verify without ModelxcelPro installed.
    • addedPer-user Ed25519 keypair generated on first launch. Private key sealed with DPAPI CurrentUser at %APPDATA%\\ModelxcelPro\\keys\\; public key embedded in every envelope you sign. Public-key trust, organizational identity binding, and revocation are the future enterprise layer — what ships today is honest cryptographic integrity for the artifact.
    • addedStandalone Node verifier shipped in the repo at tools/verify-replay/verify-replay.js — zero npm dependencies, uses Node’s stdlib crypto. Rejects duplicate top-level keys, checks algorithm/canonicalization/version, recomputes keyId = SHA-256(publicKey)[0:16], reconstructs the signed payload bytes per the canonicalization spec, and verifies the Ed25519 signature against the embedded public key. A committed sample round-trips end to end: node tools/verify-replay/verify-replay.js sample.mxreplay.signed prints verified: true.
  4. majorv2.0.0.0

    Initial public preview — Proof, Compare, and Visualize land together.

    • addedProof system: Bind Source, Bind Vector, Sign Cell, Sign Block, Verify Workbook, Verify Ledger, Proof Coverage, Replay Proof, Export Proof Certificate. The Causality engine lives in workbook custom XML; SHA-256 source pinning + canonical-record attestations chained into an append-only hash ledger; Replay Proof emits a SHA-256 self-hashed certificate anchored to the ledger head.
    • addedMaterial Change Intelligence in Compare to Previous Version — knows why outputs moved between versions, not just what changed.
    • addedRisk Heatmap with three view modes (Risk, Structure, Audit), all-sheets analysis, and an interactive legend panel. Ctrl+Shift+R.
    • addedTrustLens formula workbench (Ctrl+Shift+I) with cross-sheet precedent / dependent traversal.
    • addedSmart Format intelligence layer — reads the financial meaning of each cell and applies the right notation. COD reads as a date, DSCR as a ratio, WACC and fees as percentages, "exchange rate" as a factor (0.0000) rather than a percentage. A large financial-model vocabulary covers Date, Percent, Ratio, and Factor cues across IB, PE, project finance, and corporate finance language. Three operating modes: Format Selection (Ctrl+Shift+J), Format Sheet (Ctrl+Shift+Q), and Auto Format toggle (Ctrl+Shift+X). Direct-apply shortcuts (Alt+Shift + N / P / D / F / R) let you override the classifier when you already know the answer, and Alt+Shift+H stamps a Section Header.
    • addedAutoFormat (format-as-you-type) watches eligible edits and batches them into one formatting pass — no flicker, no fighting your typing. Numeric and formula edits get the same Smart Formatting engine in the background; ordinary text constants stay out of the way. Helpful, not dictatorial.
    • addedThemes and Flag Pattern Detection — eight built-in themes (Default · Ruby · Desert · Modern · Amethyst · Boardroom Graphite · Covenant Slate · Ocean) plus a custom designer for colors, borders, and number formats, with live preview and per-workbook persistence. Flag Pattern Detection recognises through-date, after-date, between-date, and non-consecutive toggle patterns — lonely 0/1 cells stay as numbers. Empty References Highlighter remains a focused review surface for blank cells that formulas read.
    • addedAudit Trail (Verified / Questionable / Erroneous) with persistent .mxaudit JSON sidecar and a per-cell highlight toggle.
    • addedCloud-aware path resolution — OneDrive and SharePoint URLs are handled transparently using Excel\'s native credentials. No OAuth / Microsoft Graph setup.
  5. previewv0.1.0

    Marketing site M2 ships.

    • addedNew product-first homepage, /security moat page, /pricing, six feature pages, four solution pages, the product comparison guide, install guide, and a working waitlist signup.
    • addedBrand identity refresh — Lufga ExtraBold display + Inter UI + JetBrains Mono accents. Federal Blue + Maya Blue palette evolves the existing brand for an engineered-precision aesthetic.
    • addedLegal stubs (Terms, Privacy, EULA, DPA) under /legal — pre-launch drafts under counsel review; final versions ship before paid commerce.
    • changedHomepage CTA copy switched from Start free trial to Join the waitlist for the phased launch period; M3 swaps it back when commerce ships.