Changelog: September 2026

P0 to P4 of the 2026-09-16 review: Zod-validated Worker JSON boundaries, fail-closed depeg, DEWS, status, reserve and pricing paths, bounded retention, guardrails against hidden D1 mutations, and 30 dedup commits.

Exit materiality tests measured executable notional before output retention (PAXG NR to 65/B-), a share rounding past 100% no longer halts publication, and the live-reserve coverage floor recalibrates from 90% to 60%.

CHFm, CADm and COPm recover through guarded Mento quotes and dEURO through its EURC redemption bridge; hourly corroboration runs before publication, and a lone DEX protocol needs an agreeing hard source.

Staged pool memory becomes a per-source registry, so a pool's family, cap treatment and V9 exit-evidence class no longer depend on which lane carried it this hour; the unresponsive BSC PancakeSwap subgraph is dropped.

The 22 degraded or erroring feeds were reworked: CADD moves to the August Baker Tilly report, APX excludes reconciled own claims, OUSG, mTBILL and RLUSD gain dated composition producers, and KRWQ units are corrected.

BUIDL tracks both registered Ethereum share classes, nine incompatible supply definitions are rejected with reasons, EURCV and alUSD scope mismatches are explained, and USDm capacity binds to verified Mento V3 pools.

The Pages prerender broken by a null-prototype logo map and the release workflow's invalid job-level env are fixed; dates render in UTC, DEWS visuals follow the canonical ladder, and API schemas state their scales.

Phases 0 to 4 of the live reserve upgrade: valuation defects fixed (USD0 decimals, fxUSD pricing), hash-pinned assurance reports for PYUSD, USDG, USDP, GUSD, BRLA and FDUSD, and Sui, Tezos, Cardano and Hedera transports.

Inherited upstream reserve gaps count once per cause (open data points 1,280 to 733 on replay), unmapped live reserves cannot restore curated dependency weights, and DDR 4.5 reads the published mint posture.

Non-USD hurdles re-base onto the USD risk-free rate so a peg paying its own inflation earns no excess-yield credit (wiTRY 44 to 6); PYS is reframed as pay-for-risk with zone chips and an explicit non-recommendation.

GET /api/safety-grades serves one score and grade per coin without a key, self-serve key issuance is closed, and donors above USD 10 claim a non-expiring key by signing a Sign-In-With-Ethereum message.

A 57-finding review closed provider identity, freshness, supply completeness, scoring provenance and CI trust-boundary gaps; bad Chainlink rounds become evidence, and future or non-finite timestamps fail closed.

Suites across worker, shared, src and scripts moved from SQL-shaped mocks and prose pins to SQLite-backed, executed-effect assertions; a corpus audit corrected 103 source-verified drift claims across 42 documents.

Liquidity Score 6.4 keeps staged pools for 14 days with prices pinned to 24 hours so coverage stops flip-flopping on crawl timing; 19 GeckoTerminal-only chains gained CoinGecko onchain ids for census.

Resources split into four nav columns, the palette ranks page intents above coin matches, the digest exposes its monthly archive, automatic X posting of daily graphics was retired, and versions cap at two decimals.

Safety Score V9 moved 9.45 to 9.461: an external validator quorum now counts as a named authority, and evaluator defects on bridge joins and commodity exits were corrected without adding evidence.

Liquidity Score 6.2 and 6.3 pin the LUSD/3Crv metapool for on-chain get_dy_underlying quotes and collapse Curve registry aliases by address; exact Uniswap V4 pool identities were recovered from DefiLlama.

Global navigation became a quick rail plus four disclosure menus with real hover intent, mobile categories drill down instead of expanding accordions, and the depeg route was rebuilt around a signature hero.

The browser stablecoin registry split into a 247 KB list plus per-coin detail projections, down from 1.52 MB. The immutable shell separated from the interactive provider, and below-fold detail lanes now load on viewport.

One cron sentinel replaced seven watchdog jobs, telemetry writes dropped to 60 second heartbeats, /api/health serves the 15-minute snapshot with operator fields on /api/status, and V9 capture bodies moved to R2.

A quarantine registry stops a retracted daily claim from re-entering the weekly recap, editions moved to Opus 5 at a bounded ceiling for 36% less spend per day, and a watchdog covers Telegram media and the weekly X post.

Pricing 6.215 added canonical sUSDS and sUSDe vault NAV coverage, redemption backstop 4.42 requires current depeg evidence for market-implied impairment, and Lisk, Asset Chain and Chiliz entered the chain registry.

One PR lane manifest feeds both check:pr and the GitHub workflow, coverage shards derive from import ownership, API reference sections generate from OpenAPI, and agent routing collapsed to 16 mappings.