v1.7
The current shipping build. This is where per-release notes begin; earlier versions were internal.
Mapping
- Import configuration exports from supported interface engines and render the full estate: sources, destinations, protocols, and the fields carrying patient identifiers.
- Downstream impact analysis for field changes.
- Credentials found inside imported exports are stripped at import and reported for rotation.
- A malformed or truncated export is reported as a located finding and never fails the rest of the import.
Verification
- ivren run compares two output sets and returns PASS or FAIL.
- ivren gate decides deployability using CI exit codes: 0 PASS, 1 FAIL, 2 could-not-complete, 3 INDETERMINATE, 4 REFUSED. Missing evidence can never become PASS.
- ivren replay replays a recorded corpus against approved, pinned, non-production targets; production-class targets are structurally refused.
- ivren probe reports what a connector would do without doing it.
- ivren parse prints an HL7 message field tree with spec names.
Formats and transport
- HL7 v2 across multiple versions with an embedded data dictionary, FHIR R4, DICOM metadata and worklists, X12 claims envelopes, NCPDP pharmacy claims, and HL7 batch files (FHS/BHS).
- MLLP, HTTP, SFTP and file transports, plus database-to-database connector modelling.
- DICOM pixel data is structurally never stored.
Engine
- Durable queues with fsync-before-ack, per-destination retry lanes with backoff, and dead-letter handling.
- Alert-on-silence when an expected feed stops producing traffic.
- Declarative transforms with static silent-drop analysis.
- Message search and resend from the console, with metadata, masked, full and export permissions separated.
Migration
- Shadow-run: execute a proposed route beside the incumbent on the same traffic, deliver nothing, and produce a signed divergence report locating any difference to the exact field.
Security and licensing
- Console binds to 127.0.0.1 only and makes no external network requests.
- Hash-chained, append-only audit logging with tamper detection behind server-side role-based access control.
- Signed licences (Ed25519) verified locally, with fully air-gapped activation and a 14-day grace period when the licence server is unreachable.
- An expired or unlicensed install never blocks activate, help, version, or uninstall.