Evermuse Release Notes — November 28, 2025

Overview

This release levels up Evermuse across three fronts: stronger security & compliance, smarter AI + data workflows, and more scalable, reliable infrastructure. It also brings a polished AI Advisor home experience, better roadmap filtering, and a set of SOC 2-ready documentation updates that make our controls clearer and easier to audit.

✨ Product & UX Improvements

• AI Advisor Home Page
  The AI Advisor experience now has a dedicated home surface, giving users a clear starting point for AI-powered insights and recommendations, and making this experience production-ready.

• New Data Tab
  A new Data Tab delivers visibility to automated signals-collection with the ability to group, cluster, and drill in. We’ll keep enhancing this view for research-focused team members that want to stay connected to the raw data.

• Roadmap Suggestions Time Filter
  The Suggestions view can now be filtered by time period, making it easier to focus on Suggestions arising from recent conversations and sources. The prioritization changes accordingly.

📊 Data Quality & Meeting Intelligence

• Smarter Junk Notes Cleanup
  Junk-note cleanup now runs after batch notes processing completes, rather than at meeting end. This prevents premature deletions and improves the quality and completeness of captured notes.

• Better Filtering of Company-Side Statements
  Junk-note logic now uses a canonical participants list to ensure company-side speakers (facilitators, PMs, sales and support folks) are ignored in the signals collection.

• Iterative Product Spec Distillation
  Product spec generation in the new codebase has been upgraded to iteratively refine specs, leading to more reliable, consistent outputs and a more maintainable implementation.

🐞 Bug Fixes & Security Enhancements

• Workspace Selector Stability
  Fixed a crash that could occur when searching in the workspace selector, improving reliability during navigation.

• Timing-Safe Authentication
  Authentication now uses constant‑time password comparison, closing off timing attack vectors and strengthening our login flow.

• Path Traversal Protection
  All file path inputs are validated and sanitized, significantly reducing the risk of directory/path traversal and unauthorized file access.

• Secure Dependency Updates
  The glob dependency has been updated to a secure version, removing a known third‑party vulnerability from our stack.

• SOC 2 Documentation & Controls
  We’ve deepened our SOC 2 alignment and evidence:

  • Added comprehensive SOC 2 compliance documentation describing key controls.
  • Published a SOC 2 data flow diagram detailing how data moves securely through the system.
  • Updated network security policy documentation and diagrams to reflect the current production architecture.
  • Corrected and clarified webhook security controls to match our hardened implementation.
  • Documented the meeting video downloader script, including purpose, boundaries, and data handling behavior.

💳 Billing & Subscription Reliability

• Subscription Renewal Date Verification Fixes
  We’ve corrected renewal date verification logic, addressing edge cases and improving alignment between subscription states and billing events.

• Chargebee Error Handling

  • “Subscription not found” scenarios are handled more robustly.
  • Non‑404 Chargebee errors are re‑thrown, enabling retries and making transient or upstream issues easier to recover from automatically.

These changes collectively reduce silent failures and improve billing transparency.

🚀 Performance, Scalability & Infrastructure

• Horizontal Scaling Improvements

  • Increased maxInstances to 100 in development and 1000 in production for key services, enabling smoother horizontal scaling under heavy workloads.
  • Optimized Cloud Run settings to better handle concurrent video uploads.

• Video Processing Concurrency Tuning
  Video processing now runs with concurrency set to 1, preventing resource contention and making processing behavior more predictable during spikes.

• Unified Task Configuration
  Task queue configuration (tasksOptions) has been consolidated into the services workspace, creating a single source of truth and reducing the chance of configuration drift across environments.

🧰 Developer Experience

• Cursor Workflow Improvements
  • New remove-flag and write-test commands make it easier to clean up feature flags and encourage test‑first workflows.
  • The release-pr command now automatically extracts Linear ticket IDs from branch names, tightening the connection between code changes and tracked work.

These improvements help the team ship faster, with clearer traceability and better testing discipline, directly supporting SOC 2 change‑management expectations.

For questions, feedback, or support, please reach out to the Evermuse team at team@evermuse.com - we’re here to help!