Changelog

v0.1: 2026-02

Initial public release of the Exona API.

Endpoints

• POST /v1/scans: Create an AI risk scan for a company
• GET /v1/scans/{id}: Retrieve a scan by ID

Features

• Six-dimension AI risk assessment with scored rubric and evidence-backed rationale
• Business enrichment (sector, revenue, operations, AI description)
• Historical incident matching via semantic similarity
• questionnaire parameter for incorporating application Q&A into the risk assessment
• max_age_days and force_refresh for scan result caching
• include_field_citations flag for full source audit trail
• Live and test environments via key prefix (exo_live_... / exo_test_...)
• Consistent error envelope with machine-readable codes
• X-Request-ID on all responses
• Rate limit headers (X-RateLimit-Limit, X-RateLimit-Remaining, X-RateLimit-Reset)

---

Future changes to the API will be documented here. Breaking changes will be communicated with a minimum 90-day deprecation notice before taking effect.

To receive notifications about API changes, contact support@exonalab.com to be added to the API changelog mailing list.