Week of April 19–25, 2026

This week at a glance

A big week across all four products. Layer reached general availability with the full SaaS lifecycle suite. Overwatch shipped wider AIS coverage, a status page, and reliability fixes. Locus and Codex landed civic data fixes and broader coverage. Highlights below; daily entries link out to the deeper details.

New features

Layer GA — full SaaS lifecycle suite:

• Audit log — immutable trail of workspace actions, retained 6 years
• AI spend tracking — per-employee usage and cost across OpenAI, Anthropic, Copilot, Cursor, and more
• Virtual cards with per-vendor caps under Spend management
• Spend budgets scoped by department, category, or app
• SaaS benchmarks against industry peers
• License management with seat harvesting
• Access reviews with deadlines and escalation
• Multi-stage access approval workflows
• AI contract extraction with renewal calendar
• Automated offboarding — OAuth/SSO revocation, license reclaim, device returns
• Onboarding readiness tracker
• Device shipping with carrier tracking
• Compliance readiness dashboard
• Webhook notifications — route events to Slack, PagerDuty, etc.
• Custom fields on assets, contracts, apps, controls, and evidence
• Scheduled CSV/PDF reports
• Global search across apps, people, assets, and contracts

Layer — additional launches:

• MCP server — Claude and ChatGPT can query your asset inventory, discovered apps, controls, and platform overview
• Free no-signup shadow IT scan for Google Workspace — up to 50 apps in under five minutes
• Axiom Layer Precision browser extension tracking active vs. passive SaaS usage
• Plan-tier limits enforced live across the dashboard and API, with rate-limit headers on /api. See Plans and billing

Other products:

• Overwatch: Built-in status page showing real-time health for database, AIS data, ingestion, and visit pipelines, plus a programmatic health endpoint
• Codex: New port authority governance dataset covering Oakland, Long Beach, Los Angeles, JAXPORT, and the Port Authority of New York and New Jersey
• Codex: All 111 tables now carry the full APRS envelope, with coverage enforced in CI and tracked on the envelope coverage dashboard
• Locus: In-app support chat with identity verification when signed in

Updates

• Overwatch: Default AIS coverage radius expanded from ~55 km to 220 km per port, with an opt-in global tracking flag for dark-fleet and open-ocean monitoring
• Overwatch: New tiered AIS data retention policy — full resolution for 7 days, thinned to one position per minute through 30 days, then archived
• Overwatch: ~16,000 historical vessel visits backfilled with hydrostatic cargo estimates
• Overwatch: Vessel markers on the live map replaced with rotated triangle icons that read as bow-forward at every zoom, and the marketing-site hero map default moved from the Bosphorus to the Port of Long Beach
• Layer: New dashboard persona setting (Finance, IT, or Both), hardware lifecycle settings, and a shadow-app review queue with explicit approve/reject flow
• Layer: Brand accent refreshed from amber to pink across the Layer marketing site and dashboard. The cross-product bar now uses pink for Layer and indigo for Locus everywhere
• Codex / Locus: NYC council decisions and zoning variances are now populated, with a Legistar HTML fallback when the JSON API misses fields. Federal NEPA environmental reviews are flowing in via the Federal Register
• Codex: 5x faster APRS backfill on the largest legacy datasets — projected completion now under 60 days. NTD transit ridership data restored, with quality improvements in NFIP and HMDA
• Platform: New silent-failure detection automatically flags ingestion runs that report success while writing zero rows or only partial data. Stale data sources — including civic feeds, OSM-driven walkability, and AIS pipelines — are now caught and surfaced within hours instead of going unnoticed, so freshness regressions don't quietly degrade cell scores or risk scores
• Locus: OSM Overpass enrichment now uses a server-side timeout on every tile request and retries cleanly when the upstream returns 504, eliminating the long stalls that occasionally blocked walkability and accessibility refreshes. USCIS facility lookups also handle the renamed bulk-data column names automatically
• Locus: Refreshed social previews and sharper page titles on locus.axiomancer.io; the signals page now reads counts directly from the live catalog
• Platform: Cross-product bar inactive labels now meet WCAG AA contrast, and the Docs link is product-aware on every site

Fixes

• Locus: Cell scoring writes restored after upsert errors were being swallowed; scores, rankings, and downstream queries are flowing again
• Locus: Walkability scoring restored after the upstream OpenStreetMap provider began rejecting requests without a User-Agent
• Locus: Code enforcement collection now uses a 7-day window matching its weekly cadence, so updates no longer time out
• Overwatch: More reliable Equasis vessel enrichment — registered owner, flag state, and deadweight tonnage populate consistently
• Overwatch: Daily risk-scoring feature generation restored after a column-mismatch failure; ship-to-ship transfer history and identity-change events stay current
• Overwatch: Port-call and disruption processing now uses smaller batches and per-query timeouts, eliminating timeouts during load spikes
• Overwatch: Flag-hopping detection now records all flag changes; a client-side crash on first load was resolved; first-time-seen and shared-MMSI vessels no longer drop position updates
• Layer: Slack integration credentials are now encrypted at rest, matching every other connection
• Layer: Stronger ownership checks on virtual card issuance verify the cardholder belongs to your organization before a card is created
• Layer: In-app support chat and tracked analytics events now load reliably on browsers enforcing strict Content Security Policy
• Layer, Codex: Hero video scrub-bar storyboard thumbnails on axiomlayer.io and axiomcodex.io now render correctly under strict CSP
• Codex: Favicon and tab icons on axiomcodex.io now load cleanly on every page, clearing a 404 that was firing on each navigation
• Overwatch: Live vessel positions endpoint that powers the live map restored after a recent retention-layout change
• Overwatch: Ship-to-ship transfer detection restored after a silent failure that had been stalling new STS events since April 19; the candidate query now runs against the freshly-refreshed positions view, so encounters land within the 2-hour cadence again
• Overwatch: AIS positions sourced from AISHub now carry a spatial index, so they appear in map viewport queries, port-radius lookups, and other geospatial filters alongside positions from every other AIS feed
• Locus, Codex: Cultural amenity data from OpenStreetMap is flowing again after the upstream Overpass API began rejecting requests that didn't send proper User-Agent and Accept headers — all nine US tiles had been silently failing
• Platform: A new silent-failure detector now flags ingestion jobs that report success while writing zero rows, surfacing stale or broken data sources within hours instead of days
• Overwatch: Anonymous visitors no longer see a spurious 401 console warning from the in-app messenger on axiomoverwatch.io
• Locus, Overwatch: Marketing pages and the cross-product bar now meet WCAG AA contrast across hero copy, footers, subtle marketing text, integration category pills, and inactive product labels, with proper <main> landmarks for screen readers
• Layer: Subtle copy, integration category pills, remaining slate captions on the Layer marketing site, and the benchmark-card note on the free shadow IT scan all now clear WCAG AA contrast. Visual hierarchy is unchanged
• Layer: The in-product login and signup pages now expose a proper <main> landmark, and the primary sign-in button and signup link use a deeper indigo that clears WCAG AA contrast on white. Visual hierarchy is unchanged
• Locus: Pricing page now meets WCAG AA contrast across muted copy, the BEST VALUE badge, and tier-card text, with a proper <main> landmark and corrected heading order. The fix lifts shared design tokens, so the pulse, docs, and other token-driven pages inherit the contrast improvements automatically. Tier-card body text was further lifted in a follow-up pass, and the Contact us link on the Enterprise tier is now underlined so it doesn't rely on color alone to indicate it's a link
• Locus: All eight content pages on locus.axiomancer.io — blog, pulse, docs, methodology, sources, explore, signals, and rankings — now expose a proper <main> landmark, so screen readers can jump straight to the primary content and Lighthouse landmark-one-main audits pass site-wide
• Locus: Shared content footer on pricing, blog, pulse, docs, and the rest of the token-driven content pages now meets WCAG AA contrast across column headings, body copy, copyright, and the Privacy / Terms links
• Locus: Category pills on the Locus blog now use deeper indigo, green, and yellow shades so labels clear WCAG AA contrast on the light card background, including a follow-up bump on the Market Intelligence pill to push its green tone the rest of the way past AA. The pill colors still read as the same color family — only the saturation was lifted
• Overwatch: Checkout buttons on the Overwatch pricing page now render dark label text on the amber Professional and cyan Supply Chain Risk tiers, lifting both buttons well past WCAG AA contrast
• Overwatch: The Overwatch blog index and individual posts now expose a proper <main> landmark and lift de-emphasized slate copy past WCAG AA contrast on the dark background, so screen readers can jump straight to the post body and Lighthouse audits pass
• Overwatch: Final marketing-site contrast lifts on axiomoverwatch.io — newsletter footer text, hero stat labels, and the blog publications input placeholder and "view all" link all now meet WCAG AA contrast on the dark background, clearing the remaining color-contrast violations on the homepage and /blog embeds
• Overwatch: Final a11y sweep across the in-product routes — live map, ports, compare, congestion monitor, intelligence, and trade-intelligence pages all lift their remaining slate copy past WCAG AA contrast, so secondary labels, vessel-marker tooltips, and dashboard previews are now legible on the dark background
• Overwatch: The platform page now exposes a <main> landmark, fixes heading order under Live products, Coming Q3, and Who uses Overwatch, and lifts de-emphasized slate copy past WCAG AA contrast on the dark background
• Layer, Locus, Overwatch: Brand colors and Docs link fallbacks aligned across all four sites — pink for Layer, indigo for Locus, with the Docs link falling back to each product's own docs section
• Platform: The Axiomancer Labs landing page now exposes a Docs link in its top nav and footer, lifts solid-button labels past WCAG AA contrast, and aligns its cross-product bar accents with the refreshed Layer pink and Locus indigo palette
• Platform: The Axiomancer Labs landing page no longer flips into Next.js's error fallback on first load, so the home page renders with its proper lang attribute and <main> landmark every time. A safety net was also added so the fallback page itself stays accessible if any provider throws — clearing remaining Lighthouse html-has-lang, landmark-one-main, and errors-in-console audits

No action is required on your part for any of the fixes above.