Changelog

The App Store submission, and the things that have to be true before it.

• Billing. There is none yet, and the app cannot be sold without it. The model is settled and published on the pricing page: $5 a month for the verification engine after a seven-day trial, $2 per identifier registered, and the first ten identifiers free for every shop, always. It replaces the three-tier ladder that page used to describe, which gated features that should never have been gated. Nothing is charged until the plan is live in Shopify Managed Pricing, and installed merchants get an email before it is.
• Marking items sold automatically. Changing an item's status by hand works today. Doing it from a fulfilment needs somebody to record which physical piece went into which order, at packing time, which is a workshop question rather than a code one. Until it is settled, the status is yours to set.
• Export your register. A CSV of everything in it, from the app's home screen, at any time: every identifier with its product, edition, dates, status and the address its card resolves to. Worth taking before you uninstall — our copy of your records is deleted 48 hours after that, though the register in your own Shopify admin stays either way. The privacy policy described this before it existed; now it does.
• A correction to the privacy policy. It said the app reads order data to know when an item has been fulfilled. The app holds that permission but has never used it, because marking items sold automatically is not built. The policy now says that, rather than describing something that does not happen.
• A walkthrough recording, which is why the tutorial page currently has a panel where a video should be.

The first version that worked end to end against a real store.

• The register. Installing creates a provenance_item metaobject definition in your own Shopify admin. It is yours, it is exportable, and it survives you uninstalling the app.
• Minting. Browse products, pick variants and quantities, mint a run. Identifiers are unique by database constraint, carry no structure, and use an alphabet with no I, L, O or U so nothing can be misread off a card. A run may cover several products.
• Limited editions. An optional edition size per line, numbered as items are minted. Numbering continues from what that variant has already been minted, so a restock does not produce a second No. 1, and a run that would exceed the size is refused.
• Print. A standalone print sheet, one card per identifier with the code as text beneath the QR, grouped by product when a run is mixed. Or the print package: vector QR files and a merge-ready CSV for an InDesign data merge.
• The verification page. Live from install at /apps/provenance on your own storefront, rendered by Shopify inside your own theme. Nothing to create and no block to place. The theme block is still there for a brand that wants the panel on a page they have designed.
• The lookup returns identity, never a verdict. Model, colourway, photograph, dates, edition. A code that was never issued is reported as not in the register, in the same shape and at the same speed as one that resolves.
• Certificates. A4, one per item, rendered on demand from the register. Headed "Certificate of registration". An item reported lost or stolen says so on it, and that state is not restylable.
• Status and history. In stock, sold, lost or stolen, with every transition recorded against whoever made it. Clearing a lost-or-stolen report requires a reason.
• Editing and deleting, while unprinted. Edition number, edition size and the made-on date can be corrected, and a run can be deleted outright. Marking a run printed freezes all of it, which is one-way on purpose.