Changelog

2026-04-10 — Trust foundation

Added Terms of Service, Privacy Policy, Acceptable Use Policy, DPA template
Added Methodology page with metropolitan ranking caveat
Added Sources, Coverage, Security pages
API response shape: every /v1/safety/* endpoint now includes a _meta object with data_year, data_coverage, primary_source, last_updated, methodology, and disclaimer fields. This is an additive change — existing clients are unaffected.

Expanded from California-only (457 cities) to 49-state nationwide coverage (~8,900 cities)
New columns on safety_scores: state, data_coverage, primary_source, fallback_used, last_updated
New empty tables for future use: safety_scores_history, zip_codes
Per-state percentile ranking (cities ranked against others in the same state)
Known limitation: Florida is not yet in the dataset (FBI NIBRS non-participation)
Existing endpoints unchanged — queries by city name still work, now return data from any US state

New crimelayer-monitoring worker on a 5-minute cron schedule
Per-request metrics (latency, status, endpoint) written to Cloudflare Workers Analytics Engine
Anomaly detection with Slack webhook alerting
Admin metrics page at /dashboard/metrics (auto-refreshing every 10 seconds)

Coverage: 457 California cities + 53 counties
Endpoints: /v1/safety/:city, /v1/safety/county/:name, /v1/safety/batch, /v1/stats
Rate limiting per plan tier
API key authentication via X-API-Key header

CrimeLayer uses URL-path versioning (/v1/...). Within a major version, we commit to:

Additive changes only — new fields, new endpoints, new optional parameters
No silent breaks — removing or renaming fields/endpoints requires a new major version
Advance notice — major version transitions announced at least 90 days in advance via this changelog and via email to active API keys
Overlap period — old and new major versions run in parallel for at least 6 months

This page is the source of truth for API changes. Bookmark it or email [email protected] to be added to the changelog notification list.