What we shipped, in plain language.

Provisioning ran the full set of roughly 1,270 schema migrations against an empty database — upwards of eight hours for a recent onboarding, and growing with every release.

A new tenant is now created as a file-level copy of a pre-migrated template: no schema statement is re-executed, and the clone starts fully up to date. The cost is the size of the template, not the number of migrations.

• The template is kept level with the live schema as part of the normal upgrade run
• The old path remains the last rung — no template, a stale template or a failed clone all fall back to the full migration run, correct and merely slow, with the reason logged

The Payments Received form derives the currency and exchange rate from the invoices selected, and drives the amount from them, so a foreign-currency receipt cannot be captured against a mismatched rate. A manual General Ledger entry added to an export receipt now carries its own foreign amount.

The journal entry screen now opens on the fiscal year that contains today, and vendor invoices open as a worklist of what needs attention rather than the entire history. Both grids also stopped issuing a query per row, so they load faster on top of loading less.

Presentation and filtering improvements across the Vendor Ledger and the Bank Book.

Saving a receipt without picking any invoice did not hold it unapplied — it settled the customer’s open items oldest-first at posting time. An unidentified remittance therefore cleared invoices on a guess, on a posted document, which then had to be unpicked.

A receipt can now be marked on account, so “not chosen yet” and “deliberately unapplied” are different states. Existing receipts are unaffected.

Down payment requests, advance payments and on-account payments all put money on the debit side of a supplier account before an invoice is settled in cash. One page now shows everything an invoice can be cleared with and applies it.

• Setting an advance against an invoice is a reclassification, not a payment — no bank account moves on this screen
• Fixes a live defect: an invoice relieved by a down payment adjustment still read as fully open, so the next payment run proposed it at full value and the supplier could be paid twice for the part already advanced

Work centres, machines and skills are now described as data — what each resource is capable of, how much of it there is, and when it is available — and the scheduler honours those limits instead of assuming infinite capacity.

• Capability master data with its own maintenance screens and navigation
• Capacity profiles and reservations shared by the scheduler and the delivery promise, which is what stops the two disagreeing
• The legacy first-in-first-out scheduler has been retired

A constraint solver now produces the schedule, and a planning board shows the result before you commit to it.

• Running and publishing are separate acts — a run writes only its own proposed dates, and publishing is a distinct permission that moves the live ones
• Scheduling weights are yours to set per tenant, so the plan reflects what your factory actually optimises for
• The solver is an upgrade, never a dependency: if it is unavailable the run falls back to a finite-capacity heuristic over the same problem and records which engine produced the plan
• A capacity overrun is reported as a warning to be judged, not a hard refusal

Bulk schema updates across many tenants now stream per-database progress instead of going quiet, carry a configurable timeout long enough for a large tenant, and surface the real diagnostic when one database fails. Static files are also collected before migrations run, so a single failing tenant can no longer take the interface down with it.

Several long-standing defects in how the application binds work to a tenant’s own database have been corrected together.

• The tenant switch is now isolated per request thread, so two concurrent requests can no longer influence each other
• Transactions are bound to the database their writes actually go to — which is what makes a rollback roll the right thing back, and a report-only run genuinely write nothing
• One connection per request, so a nested transaction behaves as one
• Fallback reads open a savepoint, so a query that was expected to fail can no longer leave the rest of the request failing behind it
• Tenant provisioning no longer disturbs the shared connection

Three list and detail endpoints were issuing a separate database query for every row they returned. They now fetch what they need in one pass, and the screens load noticeably faster on large data sets.

The application carries hundreds of maintenance and reporting jobs — seeders, reconciliations, backfills, health checks — and every one of them was reachable only over a server session, with several different spellings of “report” versus “apply” and two opposite defaults.

• A published catalogue of what each job does, with one uniform way to say “report only” and “apply”
• The catalogue is an allow-list: a job that has not been reviewed and registered is not runnable from the console, full stop
• Apply mode requires the job’s own domain permission, not merely access to the console
• Every run is recorded — who, when, against which tenant, with what result — and a run that was queued but never picked up is reported as stalled rather than failed

Accounting spans receivables, payables, the general ledger, banking, assets and reporting, and finding a screen meant knowing which branch of the menu it lived under. The new landing page lays the whole module out as grouped tiles, so the destination is visible rather than remembered.

The delivery date on a sales order line used to be arithmetic: order date plus the material’s lead time, recalculated every time the order was saved. It consulted no capacity, no materials, no order book and no working calendar — a thirty-day lead time crossing a festival shutdown was still thirty days — and nothing anywhere recorded what the customer had actually been told.

• Capable to Promise answers a salesperson with a customer on the phone, reading the same capacity model the factory schedule runs on, so the promise and the plan agree
• The promise is recorded as its own document, so what was committed, when, and on what basis is auditable afterwards
• A material with no lead time used to promise same-day shipment — the flattering answer, and completely invisible. The date is now left empty instead: a visible gap somebody can fix, rather than a commitment nobody knew was made

Competencies and rating bands ship as seeded master data and combine with goal achievement into a single composite score for the cycle.

• Calibration sessions moderate ratings as a second, independent judgement, with the manager’s original rating preserved
• “Not rated” and “not measured” are real answers — they are reported as such, never quietly defaulted to a middle value

Goals are set against a cycle from a reusable template, and progress is captured through the year in check-ins rather than reconstructed at appraisal time.

• Appraisal templates define what a cycle measures and how the parts are weighted
• Goal actuals can be read from the systems that already hold them, instead of being retyped
• Continuous feedback recorded alongside the goal it refers to
• The rating scale is frozen onto the cycle, so changing the scale next year never rewrites last year’s ratings

Feedback is collected from managers, peers, reports and the employee themselves, and feeds the composite as a weighted component.

• A rater category below its response threshold is withheld entirely — no mean, no shape, no comments — and is never merged into another category to make the numbers up
• The self rating is collected but excluded from the others’ score and from the response rate
• Not invited, no response and withheld are three different answers and stay apart
• When a category is withheld its weight is redistributed and the amount is shown
• Invitations, reminders and result notices are sent automatically

Performance is placed against potential on a 9-box grid, and what follows from that placement is recorded.

• An employee with no potential assessment is absent from the grid, never placed in the middle — and the grid reports everybody it could not place, with the reason
• Placement is moderated in the same calibration session, as a second independent judgement
• Succession benches, and Individual Development Plans visible to the employee they are a commitment to
• Potential assessments are deliberately not visible to their subject; a development plan deliberately is

Descriptions, notes, terms and correspondence leave your company and are read by customers and suppliers. The Writing Assistant checks them as they are typed and suggests corrections in place.

• Runs on a service hosted alongside the application — your text is not sent to any third party
• Enabled per tenant from its own settings screen, with the fields it applies to under your control
• Ships inert: until it is switched on, every field behaves exactly as it does today, and if the service is ever unreachable the form still saves normally

The dashboard reported only the payable side, and the unallocated-payments figure was never rendered at all. It now carries the full advance position.

• Six new indicators: Advances Outstanding, Advances Paid Year to Date, Advances Pending, Advances Over 180 Days, Unallocated Payments and Net Exposure
• Ageing buckets for open advances, a six-month paid versus adjusted trend, and top vendors by open advance
• A drilldown that lists the open advances behind any bucket, one row per down payment request