SENTINEL: shipped changes worth auditing.
Covering the research infrastructure, scanner, founding beta, and public proof surfaces. This page highlights review-worthy changes, not every commit.
Full sweepSecurityJune 9, 2026
Public boundary and entitlement audit
API boundary
- Raw trade and backtest API surfaces moved behind integration/admin access; public consumers use receipts and tier performance instead.
- Copilot request bodies now have size caps, safer logging, and request guards so prompt content is not stored raw.
- Production CORS now requires explicit origins instead of relying on a wildcard fallback.
Subscriber copy
- Telegram and web copy now name the live surfaces plainly: CORE is sweet plus liqsqueeze; Research Lab live delivery is super after risk acknowledgement.
- Alpha remains paused/logged for recalibration, and legacy squeeze rows are not presented as live delivery.
Receipt passWebsiteJune 8, 2026
Proof pages and free-tool copy refreshed
Public pages
- /tape, /losses, /verify, and /performance carry the public proof path instead of asking visitors to trust a static claim.
- The Trend Flip Scanner keeps failed flips visible and now has a mobile card view for narrow screens.
- The SENTINEL Trend tool is hosted as a free open-source Pine script on the site.
Phase 3WebsiteMay 5, 2026
Marketing surfaces aligned to the SENTINEL desk
Website
- Home scanner chrome, About, Docs, Performance, Signals, and Updates moved onto the SENTINEL design primitives.
- Each redesigned page carries its own title, description, OpenGraph metadata, and Twitter metadata.
- The scanner table itself remains untouched for a later product phase.
Audit rollup
- Snapshot export now starts with SENTINEL SNAPSHOT.
- Docs no longer describe tickers as trade links.
- Performance figures on /beta pull live from the scanner — no static constants.
- Static HTML cache headers now allow short edge caching after deploy.
Phase 2BetaMay 5, 2026
Design system and founding beta proof
Design system
- Added the sentinel color tokens, 8px-radius components, and shared Badge, Button, Card, KV, and Section primitives.
- Recorded the web voice reference so page copy stays aligned with the public research desk.
Founding beta
- /beta now uses the design system as the proof page for the rollout.
- Public receipt components pull live CORE context from the scanner rather than static marketing constants.
- Founding access copy explains the 14-day trial, manual renewal, and non-custodial USDC flow.
Phase 1.5SecurityMay 4, 2026
Web perimeter hotfix
Trust and SEO
- Trade URLs were removed from scanner web components.
- /robots.txt and /sitemap.xml now serve real static files instead of the home page.
- Unknown routes return HTTP 404 with the exported 404 page.
- Root copy dropped hype phrasing in favor of research-desk positioning.
- Root OpenGraph and Twitter metadata were added for shared links.
Phase 1WebsiteMay 4, 2026
Read-only web audit
Audit scope
- Inventoried the marketing pages, scanner dashboard surface, robots, sitemap, metadata, and operational link rules.
- Catalogued findings across blocker, high, medium, and low severity in docs/WEB_AUDIT_2026-05-04.md.
- All blockers and high findings resolved by Phase 1.5.
- Confirmed no frontend env leaks, no client references to admin APIs, and no stale performance constants in frontend copy.
BillingBillingMay 4, 2026
Solana Pay rail wired for founding access
Subscription flow
- /subscribe and /renew create one-off Solana Pay invoices for the founding CORE subscription.
- Helius webhook auth, polling fallback, invoice expiry, and duplicate-payment idempotency are wired.
- Payments activate access only after matching the expected recipient, mint, amount window, and timing rules.
v7 archiveModelApril 6, 2026
Historical model and scanner pass
Model history
- The April model pass rebalanced scoring weights and improved forward-return validation tooling.
- Model versioning is tracked in git; all live performance figures serve from the scanner endpoint directly.
- Static changelogs carry no performance constants — figures belong to the live scanner, not this page.
Scanner UX
- Column presets, filter persistence, data staleness indicators, onboarding, mobile cards, and error boundaries were added earlier in the product cycle.
- Those scanner-table workflows remain separate from the Phase 3 marketing redesign.
Subscriber surface
Telegram
Telegram remains the live subscriber surface while the website carries scanner, receipts, and public research-desk pages.