Welcome — paramant v2.4.5 release notes + roadmap

[Apolloccrypt]

What shipped in v2.4.5

Core relay

• ML-KEM-768 + AES-256-GCM end-to-end encryption (client-side, relay never sees plaintext)
• Burn-on-read: blob destroyed immediately after first download
• RAM-only: nothing ever written to disk
• 5 MB fixed padding on all transfers (DPI masking)
• SHA3-256 Merkle CT log — public, tamper-evident audit trail
• Five live sector relays: general · health · finance · legal · iot

Security hardening (April 2026 audit)

• 4 critical + 14 high/medium findings — all resolved
• Ed25519-only SSH host keys, post-quantum KEX (mlkem768x25519)
• Docker: cap_drop ALL, no-new-privileges, read-only rootfs
• Wildcard sudo replaced with two validated wrapper scripts (H1/H2)
• Full report: docs/security-audit-2026-04.md

Compliance

• NIS2, NEN 7510 (healthcare NL), IEC 62443 (industrial IoT), DORA, GDPR Art. 28
• EU/DE jurisdiction — Hetzner Frankfurt, no US CLOUD Act exposure

ParamantOS

• Bootable NixOS ISO — plug in USB, boot, relay is live in < 2 min
• 38 paramant-* CLI tools included
• paramant-installer TUI: guided disk install with sector selection

Client .deb

• paramant-client_1.0_amd64.deb — installs all 38 CLI tools on any Debian/Ubuntu system
• Install: curl -fsSL https://paramant.app/install-client.sh | bash

---

Coming next

Self-service API keys (Q2 2026)
Currently keys are issued by email (30-second form). We are building a self-service portal at paramant.app/keys — instant provisioning, usage dashboard, key rotation.

Professional tier (Q2 2026)
€149/mo — webhooks, 24h retention, 50 users, email support. Currently invite-only. Join the waitlist

DICOM / HL7 FHIR setup guide (in progress)
Step-by-step for healthcare operators: PACS integration, NEN 7510 config, example HL7 FHIR R4 referral flow. Preview: docs/dicom-guide.md

Python SDK fix (Q2 2026)
The receive() method in paramant-sdk v1.0.0 on PyPI has a base64 decode bug. Fix is in sdk-py/ in this repo. PyPI release coming shortly.

Enterprise tier (H2 2026)
Dedicated relay, SLA 99.9%, compliance docs (NEN 7510 cert), TOTP MFA, custom domain.

---

Questions?

Use this Discussions board for:

• Q&A — deployment questions, self-hosting, compliance questions
• Ideas — feature requests, sector requests, integrations
• Show and tell — share your deployment

For security issues: SECURITY.md (private disclosure only, please).

For everything else: privacy@paramant.app