00Filters

Security hardening and UI audit pass. No changes to signal logic or model weights.

Launch Audit Completion572-finding pre-launch audit closed. All P0 and P1 findings resolved. P2 hardening batch shipped including trade idempotency locks, MFA atomicity, and info-disclosure fixes on error paths.

SecurityStability

UI Audit Pass — Command Center + Trading PagesFull pass across Command Center, bot fleet, trading panel, portfolio, signals, and strategies. Labels, empty states, and English copy standardized site-wide.

UI/UXNon-Trading

Whop Tier Metadata AllowlistTier enforcement hardened: plan metadata validated against server-side allowlist before capability grants. Prevents tier spoofing via manipulated webhook payloads.

Security

New Protections

Trade idempotency lock prevents duplicate order submission

MFA token consumption is now atomic — replay attacks blocked

Whop plan metadata validated against server allowlist

Changelog