https://theimpactfold.com/changelog/Impactfold rule versions, validation runs and website changes. https://theimpactfold.com/changelog/#2026-09-26-sitehttps://theimpactfold.com/changelog/#2026-09-26-siteSat, 26 Sep 2026 00:00:00 +0000Repositioned around vendor-change impact, with Microsoft 365 as current coverage. Corrected the EWS validation timeline and added a validation note. Updated the EWS guide for Microsoft's phased disablement. Split security into platform safeguards and connector details. Made the pilot form more reliable. https://theimpactfold.com/changelog/#2026-09-20-sitehttps://theimpactfold.com/changelog/#2026-09-20-siteSun, 20 Sep 2026 00:00:00 +0000Product, how it works, security, EWS guide and checklist, pilot request form, changelog. https://theimpactfold.com/changelog/#2026-09-18-screenshttps://theimpactfold.com/changelog/#2026-09-18-screensFri, 18 Sep 2026 00:00:00 +0000Screens captured from the running product: the demo workspace with sample customers, and Advina Labs' Microsoft test tenant. https://theimpactfold.com/changelog/#2026-09-16-livehttps://theimpactfold.com/changelog/#2026-09-16-liveWed, 16 Sep 2026 00:00:00 +0000An operator granted an EWS application permission to a test application at 13:22:30Z. A product scan opened an Affected finding at 13:33:14Z. The grant was revoked at 13:41:29Z, and a later complete scan closed the finding and its task at 13:52:52Z. Microsoft reads were real; provider sign-in was simulated. https://theimpactfold.com/changelog/#2026-09-ews-v2https://theimpactfold.com/changelog/#2026-09-ews-v2Tue, 15 Sep 2026 00:00:00 +0000Reads the Exchange Online service principal, the application-role assignments and delegated grants on it, and each matched holder. That is at least three Microsoft Graph requests, more with pagination, several holders or retries. Uses Application.Read.All and Directory.Read.All. An incomplete read is classified Unknown: it can never report Safe or close a finding. https://theimpactfold.com/changelog/#2026-09-approvalhttps://theimpactfold.com/changelog/#2026-09-approvalTue, 15 Sep 2026 00:00:00 +0000An operator approves the exact rule version before it can scan customers. Approval is bound to the SHA-256 of the rule definition and a named reviewer, and recorded in the audit trail. Withdrawing approval stops customer scans. https://theimpactfold.com/changelog/#2026-09-closurehttps://theimpactfold.com/changelog/#2026-09-closureTue, 15 Sep 2026 00:00:00 +0000No control resolves a finding by hand. Marking a task ready for verification records intent; the next complete scan that no longer finds the exposure closes the finding and the task together, attributed to impactfold.scan-engine.