v0.6.16
- Security: Trade executions and cancellations now await exchange confirmation before reporting success, improving protection against race conditions or false positives.
- Security: Terminal sessions use safer cookie handling for authentication, avoiding leakage of tokens to the client.
- Security: Production startup enforces strong secrets and strict access control for administrative actions and encrypted storage.
- Security: High-risk operations now require confirmation in production, ensuring actions like automation enablement or provider setup are double-checked unless explicitly overridden by environment settings.
- Fix: One-click automation and portfolio logic have stronger safeguards against stale data and ensure state changes reflect actual outcomes.
- Fix: Sensitive logging paths now further redact private information related to money movement.
- Fix: Alerts and status messages more accurately reflect live account state, avoiding confusing or outdated context.
- Fix: Automation subscriptions and deployments now better filter for only verified and ready strategies, and state is kept in sync even during intermittent service failures.
- Fix: Routine for scheduled actions is more robust, handling edge cases and consistently assigning healthy deployment candidates.
- Feat: Telegram integration routes users to the latest product interface when possible, streamlining user journeys.
- Fix: Provider management screens show clearer feedback and errors, and respond consistently to user actions.
- Style: Mobile interface polish for trade sheets and proposal panels.
- Chore: Updated internal audit documentation for platform security and compliance.
- Chore: Continuous integration now includes broader security and authentication scenarios.
August 7, 2026 109 1
