Releases

First release to name all eight prod-testnet deployables and the terminal, at spec 0.9.90 with snapshot schema V6.

• Addedtimelock scheduling for market-parameter mutations
• Addedattribution-engine client and the three public season reads
• Addedrelay the three account-scoped season reads
• Addedsign the Intercom Messenger identity as a JWT
• Addedadd on-demand fill_burst scenario to the control API
• Addedopt-in all-roles prefund scope so a wiped fleet can be re-seeded
• Addedcarry the actor on halt and resume through conform and the events table
• Addedpoint both deployables at the provisioned apps-dev infrastructure

• AddedEvery request the terminal makes now goes through one Nexus service, instead of some going straight to the exchange.
• AddedThe terminal is now available in Chinese, Korean, Spanish and Portuguese. It follows your browser's language, you can switch in settings, and numbers, dates and times are written the way your language writes them.

Serve real per-fill realized PnL on GET /account/activity, at spec 0.9.69.

• Account activity is now one merged feed of fills, transfers and funding, with realized PnL reported per fill.
• Referral totals are published per venue.
• Subaccounts: every account carries a kind, and subaccounts can be minted under an owner.
• Markets report their type, settlement asset, available margin modes and whether they are active.
• Fills can be filtered by order.
• Markets can be delisted through an operator route, with the delisting carried through the market lifecycle on restart.
• An account-level block is enforced consistently across transfers, trading and withdrawals.
• Price marks are signed at publication, and future-dated marks are rejected at the ingest boundary.

Bring the gated listing lifecycle and signed value-moving actions to the production testnet.

• New markets now go through a gated listing process, staying closed to order flow until the venue confirms it's ready to trade them.
• You can send signed USDX payments to other accounts, with durable payment history you can look back on.
• Withdrawals now enforce a maximum amount ceiling.
• Added a unified event firehose endpoint (GET /events/v2) for streaming account and market events.
• Orders now expose stop-loss and take-profit prices, a remaining-quantity field, and a consistent CCXT-standard vocabulary across order endpoints.
• GET /account/rate-limit now reports your order and cancel budgets, and logins get their own dedicated rate limit.
• The ticker now includes the oracle index price.
• Referrals now has a read API for viewing your referral data.

Align the production testnet engine and indexer on the CCXT Order wire contract.

• Addedreferral activity tap + reconciliation, sourced from fee_ledger
• Addedadd the relay message contract and its CI compatibility gate
• Added/account/fees reads the durable projection, ring as fallback
• Addeddurable fee_ledger schema + Postgres store
• Addeddurable trade-history schema + store
• Addedreferral cutover onto accounts-directory
• Addedrepoint indexer fee ledger onto accounts-directory, move fee ingest poller
• Addedtrigger a withdrawal via /v1/bridge/withdrawals

Engine readiness isolation and Hyperliquid testnet oracle support.

• Addeddelete the Go backend, its deployments and hostnames
• Addedexplicit emergency settle-rule override, replacing the accidental halt→re-settle path
• Addedforce-settle admin surface — settle endpoints, Settle capability, proxy
• Addedserve the CCXT unified fields the adapter cannot synthesise
• Addedsettle-rule price-integrity guards — dedicated step band and level guard
• Addedsettle-window TWAP accumulator on OracleState
• Addedallowlist funding group
• Addedallowlist OI cap and breaker threshold

Engine and indexer to v0.5.0, oracle to v1.5.0 — one release cycle per component since exchange-3.

• Addedreferral store — accounts-access bind + edges routes
• Addedrework NexusVault.release to pay an explicit destination
• Addedsettle-rule vocabulary and pre-committed config, no producers
• Addedthin referral bind hook on /agents/register
• Addedcutover flip — agent store over HTTP
• Addedcutover flip — session store over HTTP
• Addedprovision admin grants from config and enforce the gate
• Addedthe signature-verification bench

Engine and indexer to v0.4.0, oracle to v1.4.0 — two release cycles per component since exchange-2.

• Breakingliquidation_price is null with a reason, not a "0" sentinel
• Addeddelete the console frontend, 39 route surfaces
• Addedwire admin market params update endpoint
• Addedcomposed on-behalf view for the account ledger
• Addedcomposed on-behalf views for positions+pnl and account figures
• Addedrehydrate the served open bucket from the fills tape
• Addedmake the partial-liquidation multiplier per-market config
• Addedband order-to-ack latency and encode the SLO

Moves the indexer to v0.2.0; engine and oracle unchanged from exchange-1.

• Breakingremove the unimplemented /v1/bridge Phase A operations from the contract
• Addedread the Cold Data dashboard's metrics through GMP
• Addedcarry account identity and realized PnL on the captured FillRow
• Addedenable capture in apps-stg-testnet
• Addedre-enable capture in apps-dev
• Addedsplit the writer and close buckets on the tape watermark
• Addedcontinue the trace for authenticated internal callers
• Addedown the API spec in the monorepo and publish it on deploy

First exchange-wide release: pins the current per-component semver set for engine, oracle and indexer.

• Addedserve the WAL and snapshot metrics the engine already exports
• Addeddetect a wedged rebuild worker
• Addedgive the market supervisor a clock
• Addedadd durable NLP deposit accounting
• Addedcorrelate one request across bff, indexer and engine
• Addedlifecycle vocabulary — states, mutations, WAL tags, events, status enums
• Addedper-risk_class takeover rollout — config, gauges, runbook, D6 docs
• Addedsnapshot lifecycle-state map — halted_markets set → per-market state