Safety Scores Changelog

Earlier versions

Compact summaries retain historical citation targets. Open a version archive for its full evidence and commit provenance.

1. v10.32 · Hourly publication cadence

   Oct 23, 2026

   Safety Score v10.32 publishes once an hour at :22 instead of every 30 minutes; budgets defined as multiples of the publication or preparation cadence scale with it, while score arithmetic, grade thresholds, pillar weights and evidence-age policy constants are unchanged.

2. v10.31 · Exposure-weighted local authority

   Oct 22, 2026

   Safety Score v10.31 prices known-share deployment-local authority through a resolved mixture of the same aggregation and peg pipeline used for global Control. There is no materiality threshold; the Control pillar retains global paths, while local authority is disclosed in deployment adjustments.

3. v10.30 · Active-depeg severity ladder and exact-certificate Exit confidence

   Oct 22, 2026

   Safety Score v10.30 deepens the uniform active-depeg severity ladder and raises model confidence only for admitted exact execution certificates. It also records dated vault-pricing, reserve and wrapper-assurance corrections, the score-neutral BD-basedollar refresh, VCRED delisting, partial-evidence display improvements and a tooling-only worklist fix. Observation confidence, execution admission and measurement rules, non-certificate models and other scoring rules remain unchanged; fixed-clock replay is not production acceptance.

4. v10.29 · Simplified evidence pricing, economic authority and holder-loss limits

   Oct 22, 2026

   Safety Score v10.29 replaces parallel authority scorers with one economic-authority ladder, prices missing subfactors by C/U responsibility, simplifies Exit and wrapper limits, and retains only five whole-score cap families. It ships together with v10.28; production acceptance follows the first accepted publications.

5. v10.28 · Exact exit evidence and calibrated wrapper boundaries

   Oct 22, 2026

   Safety Score v10.28 Release 1 repairs unavailable exit rails, exact-endpoint failure domains and component provenance; separates lender-class curation; protects mild-wrapper boundaries; preserves atomic exact-parent withdrawal terms and reviewed technical custody; and adopts published-residual materiality and rated-card headlines. Pillar weights, grade bands and mint-quality ladders are unchanged. It ships together with v10.29, whose simplified model supersedes the Release 1 authority, wrapper and cap rules where specified.

6. v10.27 · Bounded carry-forward of retained per-asset circulating supply

   Oct 21, 2026

   When the stablecoin supply sync has not re-observed an asset, its last observed per-asset circulating supply stays usable for a bounded, named window beyond the chain-supply budget, so Exit can size its stress request instead of dropping to its fallback floor for one run.

7. v10.26 · Bounded carry-forward of runtime inputs and grade hysteresis

   Oct 21, 2026

   A redemption disclosure admitted by its run and the last admitted wM/XAUT deployment supply attribution are carried forward for a bounded, named window instead of dropping Exit or Control to their fallback for one run, and a published letter grade changes only after two consecutive publications compute the same new band.

8. v10.25 · Wrapper withdrawal terms without duplicate execution-certainty charges

   Oct 20, 2026

   Wrapper-local withdrawal terms price actual holder restrictions, not measurement/model execution certainty already assessed by Exit. This disclosed score-changing correction applies to the wrapper cohort, including CUSDO, rather than a one-asset exception.

9. v10.24 · Source-bound evidence and conservative risk composition

   Oct 20, 2026

   The coordinated T1 release corrects reserve, redemption, measured execution, dependency, on-chain observation and issuer-identity admission. It preserves independent constraints and original evidence clocks without changing pillar weights, score ladders or freshness budgets. Broader whole-liability supply attribution, independent ordinary bridge-route clocks and structured pillar-freshness metadata are deferred.

10. v10.23 · Archive-free CCIP origins and coherent attribution captures

    Oct 19, 2026

    Safety Score v10.23 admits reviewed immutable CCIP creation and initial-sequence witnesses instead of unavailable predecessor state, while still requiring complete historical logs and current canonical liability evidence. It aligns Centrifuge observations to finalized Solana time and admits an explicitly reviewed finalized-first Robinhood pin for wiTRY.

11. v10.22 · Exact UTC admission for mechanism-review evidence

    Oct 18, 2026

    Safety Score v10.22 lets mechanism overlays and independently reviewed components carry an exact UTC evidence timestamp, admitted at that instant rather than waiting for the UTC day to elapse. This is admission-timing only and score-neutral for all existing date-only reviews.

12. v10.21 · Coherent historical heads for economic supply attribution

    Oct 16, 2026

    Safety Score v10.21 aligns independently selected safe EVM holdings heads before reading economic supply quantities, so cross-chain partitions can satisfy the existing observation-skew budget without moving the oldest head forward or relaxing evidence admission.

13. v10.19 · Allocation-weighted Morpho lender collateral-book risk

    Oct 14, 2026

    Safety Score v10.19 differentiates direct Morpho lender vaults by their measured NAV-accounted collateral books. Backing combines allocation-weighted collateral quality with LLTV-derived loss transmission, blends deployed and idle shares under the inherited-parent ceiling, and applies a separate Morpho-only 1%-of-NAV oracle materiality rule. Pillar weights, grade bands, parent caps, capital reuse and non-Morpho scoring remain unchanged. The release cut is not production acceptance.

14. v10.18 · Contributing-route partial evidence and reviewed research drain

    Oct 14, 2026

    Safety Score v10.18 narrows partial-evidence flags to contributing exclusions, admits source-bound ERC-4626 NAV references and executed smaller-probe lower bounds, bundles reviewed DEX, redemption and W1 evidence repairs, and records the W2/PKT-5 no-admission decisions. Pillar weights, grade gates, missing-data scoring, comparison policy and the USDT premium are unchanged; Track M is not part of this release.

15. v10.17 · Scoped incident research and independent evidence admission

    Oct 11, 2026

    Safety Score v10.17 expands independently scoped evidence admission and repairs missing-data attribution across Backing, Exit and Economic Control. Practical incident research, request-specific exit terms and current source-bound facts can move scores, grades and availability. Pillar weights, grade gates, materiality thresholds and freshness budgets are unchanged.

16. v10.16 · Conservative implementation age across variant layers

    Oct 10, 2026

    Safety Score v10.16 aligns production track-record inputs with the documented implementation-age policy. Half-year launch periods, scoring-date clamping and the newest required variant-chain layer now use the shared resolver. Scores, grades and availability can move; pillar weights, age thresholds and grade gates are unchanged.

17. v10.15 · Undiluted dependency losses and stricter evidence admission

    Oct 10, 2026

    Safety Score v10.15 can move scores, grades and availability by correcting dependency-loss normalization, measured exit costs and reserve admission. It also removes inactive F policy settings, deliberately rotating the semantic policy digest without changing active F admission. Pillar weights and grade gates are unchanged.

18. v10.14 · Scoped evidence repairs and bounded census admission

    Oct 9, 2026

    Safety Score v10.14 advances from the restored v10.12 without reusing the released-and-reverted v10.13. It bundles the already-main PR #1366 repairs with reviewed wave-3 bridge identity, local-fiat fees, oracle witnesses, route chronology and census integrity/resource rulings; pillar weights and grade gates are unchanged.

19. v10.12 · Research-only exact orderbooks and source-bound reserve inputs

    Oct 8, 2026

    The coordinated retirement release closes exact orderbook admission to research-only/diagnostic and corrects reserve quantity, source-clock and redemption-evidence inputs without activating staged reserve or DEX scoring cohorts.

20. v10.11 · Evidence-scoped redemption factors and live-reserve provenance closure

    Oct 8, 2026

    Safety Score v10.11 preserves explicit route-factor gaps, requires completed-endpoint support for settlement scalars and keeps costs bound to each request. Live-reserve/redemption provenance and observer repairs tighten evidence integrity without changing pillar weights, stress requests, portfolio coverage or grade gates.

21. v10.10 · Distinct evidence obligations, known reserve bounds and researched incident absence

    Oct 7, 2026

    Safety Score v10.10 counts distinct per-card evidence obligations while retaining every scoring witness, publishes fully determined reserve-bound factors as known, and admits independent exact-scope researched-negative incident reviews (wave-5 owner approval 2026-10-07). Producer repairs restore source identity, partial vault execution, EUR output references and batched Solana censuses without changing their scoring or evidence-admission rules.

22. v10.09 · Current route evidence and consistent control qualification

    Oct 6, 2026

    Safety Score v10.09 requires current open attribution for dynamic immediate redemption credit, preserves unquantified documented costs in frozen captures, and aligns custody-only questions and allocation completeness with their stated evidence boundaries.

23. v10.08 · Authenticated bridge in-flight accounting, exact vault unwinds and honest control questions

    Oct 5, 2026

    Safety Score v10.08 removes engineering blockers behind facts published as Not yet researched: authenticated pending-message readers for CCIP, LayerZero OFT and canonical rollup bridges, exact-complete instant ERC-4626 unwind certificates, applicable perpetual maturity, reviewed business-day calendars, weighted quorums, conservative maximal-reach control scopes and new census, identity and DEX shadow producers. It also stops ignoring fresh reviewer questions on controls. On the accepted production capture of 2026-10-05 (clock 1791184659) published Not yet researched facts fall from 1,476 to 1,446 and researched non-disclosure rises from 1,211 to 1,364; further producer closures follow the first production runs. Six scores move, none quarantined.

24. v10.07 · Stable route research binding and source-specific evidence corrections

    Oct 5, 2026

    Safety Score v10.07 preserves researched exit-route classifications across producer runs, admits independently proved immutable wrapper roots for contract mutability, and corrects source-specific reserve, DEX, redemption, supply and price evidence. On capture 20261004-2107, restored route research changes seven scores; wrapper mutability admission changes no score. Producer corrections require fresh admitted observations rather than rewriting the frozen capture.

25. v10.06 · Availability-invariant mint fallback

    Oct 5, 2026

    Safety Score v10.06 implements owner ruling D33: positively known economically unbounded native issuance or claim impairment is priced from its evidenced actor, power and qualifying process, regardless of reconciliation availability. This is removal of an unavailable-evidence grant, not new adverse findings. Unknown reconciliation stays an explicitly attributed unanswered factor, never a 55-point grant or a finding of measured non-reconciliation. On two production captures (clockSec 1791137823 and 1791152224, 396 cards each) the code change moves 71 cards down by 1 to 18 points (median 8) with 52 grade changes; no card rises and none is quarantined.

26. v10.05 · Operationally governed issuance and uniform voting control

    Oct 5, 2026

    Safety Score v10.05 adds D31 / rule H for positively certified affirmative operational-flow governance: discretionary expansion and envelope changes require public token governance, while formula interest and activity-bound compensation may execute immediately within reviewed envelopes. Issuance stays economically unbounded. D32 voting-control doctrine applies uniformly to D29, D30 and H; class certificates, typed authority roots and per-control diagnostics replace signer-prose admission. On two production captures, DAI moves from 53 (C-) to 74 (B) and USDS from 44 (D) to 71 (B) under the new rung; crvUSD falls from 69 (B-) to 44 (D) because Convex's 3-of-5 Safe can replace the caster of 54.1% of veCRV.

27. v10.04 · No unresearched facts for inapplicable maturity or float dust

    Oct 4, 2026

    Safety Score v10.04 stops publishing two compiler artifacts as unresearched (U) evidence facts that no research could close: maturity gaps on reserves whose maturity is already established as not applicable, either by the policy's maturity-not-applicable classes or by an admitted reviewed bound fact, and whole-asset remainders that are only floating-point accumulation dust. No card score, grade or rating status changes on the replayed production capture; the unresearched fact count falls by 599.

28. v10.03 · Minority-veto issuance due process

    Oct 4, 2026

    Safety Score v10.03 implements owner ruling D30: an unavoidable public minority-veto process protects issuance admission against majority capture and ranks above affirmative governance. Qualifying Frankencoin-style issuance derives unbounded-veto-guarded at quality 70 while remaining economically unbounded under unchanged D14. ZCHF, dEURO and JUSD are re-researched against the same fail-closed gates; a cohort member missing any gate keeps its ordinary unbounded rung. On the replayed production base only ZCHF moves, from 44/D to 81/A-.

29. v10.02 · Governed unbounded issuance and uniform D14

    Oct 3, 2026

    Safety Score v10.02 implements owner ruling D29: D14's unchanged economic-bound question and the actor's issuance process are separate axes. Positively proven, delayed, flash-resistant on-chain token governance can derive unbounded-governed without making issuance economically bounded. The release splits active compromise from unreconciled unbounded issuance, adds the 60-point mint-quality rung, and applies a uniformly sourced D14 sweep with fail-closed governance and cap-review validators. On the captured 331-card production base, 88 cards change and 34 grades flip; every change is declared.

30. v10.01 · Cause-aware evidence: pipeline gaps are not asset risk

    Oct 3, 2026

    Safety Score v10.01 distinguishes pipeline and curation gaps from researched issuer non-disclosure, unresearched questions, and measured adverse facts. Proven Pharos-side gaps stay visible without scoring penalties; bounded uncertainty remains in components without missing-data ceilings. The release preserves identified reserves, admits named-firm reports for 120 days, separates Exit confidence causes, and selects the strongest feasible route portfolio. It also includes the reviewed monotonicity, native-bridge, supply-capture, peg-coverage, and data corrections. Missing evidence still grants no executable capacity, favorable rights, or measured-adverse claim.

31. v10.0 · V10: curation, owner rulings, and physical-to-USD Exit

    Oct 2, 2026

    V10 is a major release consolidating the 2026-10-01 curation pass, owner rulings, and physical-to-USD Exit. It brings known-supply Exit sizing, whole-book custody and report-date discipline, measured collateralization, deployment-local control pricing, adverse mint evidence continuity, wrapper and inheritance corrections, and reviewed physical-metal redemption composed with conservative USD sales. Missing evidence never grants credit.

32. v9.98 · Fail-closed dependency kinds and measured representation coverage

    Sep 30, 2026

    Authored linked reserves require an explicit dependency kind, and legacy runtime rows inherit only a uniquely reviewed kind for the same native asset. Mento preserves native and bridged claim identities, USDat and Frankencoin name their immediate held intermediaries, and Avant exposes measured positive-long holdings without inventing tracked links. Pillar weights, materiality thresholds and evidence admission rules remain unchanged.

33. v9.97 · Measured reserve leaves, immediate claim identity, and producer precision

    Sep 30, 2026

    Reserve producers preserve measured small positive holdings and reconcile immediate claim identities before admitting dependency links. Tori's nested holdings replace an aggregate bucket, OnRe identifies Solomon's replacement USDv mint, Reservoir identifies Sentora PRIME's PYUSD claim, and Re's pooled portfolio remains unlinked. Updated reserve evidence changes the affected backing evaluations without changing pillar weights, materiality thresholds, or evidence admission rules.

34. v9.96 · Explicit issuer stablecoin payouts and exact Uniswap V4 identity

    Sep 30, 2026

    Two score-semantic changes: issuer redemption routes honor reviewed explicit stablecoin payouts ahead of the legacy fiat projection, and retained Uniswap V4 exact PoolIds resolve independently of indexed USD valuation. Theo thUSD's executed stablecoin-redeem rail and measured Cash Wallet capacity are curation context, not a new scoring rule.

35. v9.95 · Reviewed dependency identity, relationship parity, and reserve precision

    Sep 30, 2026

    Dependency admission now reconciles native reserve identities with reviewed relationship kinds, preserves small positive reserve shares, and rejects manual collateral omitted from linked reserve identities. Reviewed reserve and parent corrections change the affected backing baskets and serial limits; intermediary annotations and shared-book provenance explain the claims without adding a new scoring rule.

36. v9.94 · XAUT lock/mint attribution reconciles the circulating liability, not unissued treasury inventory

    Sep 28, 2026

    The XAUT lock/mint group attribution now reconciles Tether's disclosure to finalized Ethereum state on the circulating liability alone: finalized `totalSupply()` minus the treasury balance must equal the disclosed `totalAuthorized - notIssued`. It no longer requires total supply and the treasury balance to match the two disclosed inputs separately, because unissued treasury inventory is not a liability and the attribution only consumes the circulating amount.

37. v9.93 · Sub-threshold ambiguous chain rows with reviewed candidate routes are bounded supply evidence

    Sep 28, 2026

    A per-chain supply row that several profile routes compete for (`ambiguous-chain:<asset>:<chain>`) no longer blocks the bridge review by itself. When the row is below the deployment and common-mode materiality thresholds and every candidate route on that chain is reviewed, it is accepted as bounded supply evidence: the chain row is an upper bound on each candidate deployment's share, so it cannot hide a material deployment.

38. v9.92 · Aggregate-only supply publishes and gapless route reasons attribute to Pharos

    Sep 23, 2026

    An asset whose intake publishes only an aggregate circulating quantity and no per-chain partition no longer bounds that quantity on a bridge gap the control pillar already owns, and a same-notional route the method withholds by design attributes to Pharos's missing integration instead of a feed failure.

39. v9.91 · Bounded assurance-report freshness

    Sep 21, 2026

    Proof-of-reserves reports can support a known assurance component for at most 100 days from the conservative UTC start of their reporting-period end. Older reports remain visible as stale evidence rather than current assurance.

40. v9.9 · Clock-bound chain-maturity admissions

    Sep 21, 2026

    Chain maturity is now an evidence-backed, time-bounded admission rather than a static roster. Every citation carries its captured assertion, independent verification outcome, and reachability state; unresolved sources remain pending.

41. v9.8 · Published-fee physical delivery with an unbounded-terms cap

    Sep 21, 2026

    Physical gold and silver outputs are valued at spot less published fees even when delivery or handling charges are unpriced. The uncertainty is explicit rather than treated as free delivery or a refusal to value.

42. v9.7 · Explicit physical commodity delivery outputs

    Sep 21, 2026

    A separately reviewed physical-delivery contract values XAU or XAG at the unscaled USD-per-troy-ounce reference, with explicit token weight, delivery minimum and bounded percentage, flat and delivery fees. Physical metal never receives fiat or same-notional settlement credit.

43. v9.6 · Reviewed single-deployment transfer scope attribution

    Sep 21, 2026

    A current exhaustive-liability attestation can complete transfer review scope for one exact active deployment with positive admitted aggregate supply and no bridge or wrapper representations. This is attributed scope, never observed chain supply.

44. v9.5 · Exit materiality uses measured executable notional

    Sep 19, 2026

    The binary $100K exit-materiality gate now tests the producer-measured executable notional before output-value retention. Retention still discounts continuous capacity and output quality, so the correction removes a threshold double-charge without treating aggregate TVL or volume as executable liquidity.

45. v9.49 · Structural dependencies survive live reserve mapping

    Sep 10, 2026

    Variant parents, explicit wrapped-asset claims, and manual non-collateral relationships are derived independently of reserve composition. Unmapped live reserves still cannot restore curated or manual collateral weights.

46. v9.48 · Unmapped live reserves cannot restore curated dependency weights

    Sep 9, 2026

    A live composition with no mapped tracked-asset slices now remains live-unmapped with no dependency edges, instead of restoring the older curated or manual graph after a failed classification join.

47. v9.47 · Inherited upstream reserve gaps count once per upstream cause

    Sep 7, 2026

    A dependent's exposure to an upstream with an open reserve gap is one unresolved claim, not one per upstream reserve slice. The backing projection now folds every slice-level reason an upstream raises into a single reason per projected code, source code, and owner on each dependent exposure; the slice paths survive in the causal key. No evidence was added and no score or grade moves: the open data-point count stops multiplying one stale Tether attestation across every USDT holder.

48. v9.461 · Bridge joins and commodity outputs are resolved without synthetic coverage

    Sep 4, 2026

    Two evaluator mapping defects are corrected without claiming new evidence. Native issuance rows no longer enter the bridge-exposure completeness join, and physical GOLD/SILVER delivery outputs no longer enter the fiat valuation path. The fixed-input replay therefore closes nine wrongly emitted bridge facts and adds five honest unresolved exit facts; this is an accounting correction and an honest loss of false coverage, not evidence Pharos newly acquired.

49. v9.46 · An external validator quorum is a named authority, not an unknown one

    Sep 1, 2026

    Bridge routes whose message validation is performed by an external quorum (a LayerZero DVN set, a Chainlink CCIP DON/RMN, a Bantu AMTP validator group) had no authority model that could express them, so a reviewer who wrote the quorum down with its failure domains and sources still compiled to `unknown` and published an unresolved-control gap on every route the quorum covered. The authority ladder gains a `validator-quorum` rung: known, but weak. It grades at or below a named issuer backend and never above a named multisig.

50. v9.451 · An adjudicated mechanism non-disclosure says so

    Sep 1, 2026

    A mechanism component the reviewer covered and found unpublished now publishes that finding (the review date, the reason, and the source checked) instead of the generic "not a current known fact" sentence it shared with components nobody has reviewed yet. Scores, grades, owners, and the open-gap count are unchanged by construction: the fact stays bounded-unknown and the gap stays issuer-undisclosed.

51. v9.45 · Unproven settlement bounds become bounded exit evidence gaps

    Aug 26, 2026

    An open operator-batched redemption request queue whose settlement completion bound is unproven is a bounded exit evidence gap, not a measured zero. When that gap is the pillar's score-bearing evidence, Exit floors at the bounded-unknown score under the exit-unverified ceiling and the public card carries an explicit warning; the standalone redemption route is unrated because its capacity is missing.

52. v9.44 · Measured zero-capacity exits remain attributable

    Aug 26, 2026

    Exit no longer discards a fully observed issuer or protocol redemption route merely because its executable capacity is zero or below the first material breakpoint. The route remains the attributable primary evidence with a zero route score, its measured capacity and confidence stay public, and a zero pillar emits the explicit no-viable-exit-path reason. Atomic protocol redemptions are no longer misclassified as inherently delayed when deciding whether discounted evidence can receive credit.

53. v9.43 · Tether transparency uses the measured disclosure cadence

    Aug 25, 2026

    The `tether-transparency` adapter now uses the existing 7-day disclosure source-age tier instead of the 3-day dashboard tier. The retained 30-day history contains 24 upstream publications with a 1.00-day median gap and a 3.00-day maximum from the recurring Friday-publish/weekend-skip pattern; that gap landed exactly on the old bound with zero margin, and the 2026-08-16 shift from 01:00Z to 23:30Z consumed the remaining margin. The last publication was 2026-08-21T23:30:02Z, and the first production breach was detected at 2026-08-25T00:11:34Z when warning_count rose from 1 to 2. This is a live-reserve admission policy change, not evaluator arithmetic.

54. v9.42 · A stale audited composition keeps an adequate ceiling, not a limited one

    Aug 25, 2026

    An independently attested reserve composition that is no longer current was priced identically to a partial review: both floored the backing evidence level at `limited`, capping the asset at 69. A complete composition signed and reconciled by an independent attestor is stronger evidence than a partial one even after it ages, so it now carries its own reason with the `adequate` ceiling the policy declares. The evaluator also stops flooring every ceiling reason at `limited` and honours the level each reason declares, which made an existing `adequate` declaration reachable for the first time.

55. v9.41 · A stale reserve feed degrades backing instead of erasing it

    Aug 25, 2026

    An issuer without prudential supervision could publish an independently attested reserve composition and still be reported as having no reserve composition at all, because admission required supervision and the asset's only other source was a live feed. One upstream feed going stale then removed an entire backing pillar. Such a composition is now admitted one rung down, as static-validated evidence under the shorter composition window, and it keeps the issuer attribution so an expired document is reported as expired rather than undisclosed.

56. v9.4 · Evidence, scope, freshness, and incidents become explicit

    Aug 24, 2026

    Safety Score V9 replaces several broad assumptions with reviewed, scope-aware evidence. Exit terms must be established for the scored request, reserve classification and composition age independently, chain maturity follows a dated five-gate review, local controls are charged to the liabilities they can reach, and reviewed incidents enter their owning risk domain. The release also corrects stale oracle-applicability dispositions and distinguishes expired published evidence from issuer non-disclosure. Scores move in both directions because better evidence can remove a conservative penalty while adverse or missing evidence can lower or withhold a rating.

57. v9.35 · Deterministic cap reasons and locale-independent canonical ordering

    Aug 23, 2026

    Safety Score V9 removes two ways the host environment could influence a published result. When two cap candidates share a limit, the specific observed or withheld fact is now published ahead of the generic absence reason instead of letting alphabetical ordering decide. Separately, every canonical ordering and digest input across compilation and publication now uses a locale-independent code-unit comparator rather than host-locale collation. Cap limits and score arithmetic are unchanged.

58. v9.34 · Cap claims become integral, scope-gated, and explicit

    Aug 23, 2026

    Safety Score V9 aligns cap outputs and evidence dispositions with their published meaning: cap limits now live in the integral published score space, unrated cards do not assert binding caps, and a pillar-priced signal needs an asserted residual before it can impose a whole-score cap. Absent wrapper facts stop being treated as issuer non-disclosure, and active-depeg peaks resolve through `pegReferenceId`; the release also records the existing policy-declared USDT market-anchor-longevity premium and its non-inheritable public adjustment.

59. v9.33 · An expired exit-route observation is derated, not discarded

    Aug 21, 2026

    Exit-route evidence whose producer window expired now loses credit instead of leaving the capacity denominator, and the published route payload widens so no single route is a tenth of an anchor's evidence. Together these remove a scoring cliff in which an ordinary producer-schedule delay re-graded an asset with no market event behind it, and propagated that move through the dependency graph to everything the asset backs.

60. v9.32 · Mint posture separates missing reconciliation from confirmed exposure

    Aug 21, 2026

    The mint component splits the exposed floor by reconciliation evidence, recognizes verified collateral-gated issuance, and extends bounded seasoning credit to eligible adverse postures. Economically unbounded minting with unknown reconciliation now scores 35 instead of the confirmed 25 floor; a collateral-gated path scores 50 below the concentrated-admin rung at 55; and an eligible adverse posture can season without crossing the dedicated 39 ceiling. The release also reclassifies CASH as continuously reconciled and the spUSDC and USDF vaults as raiseable rather than unbounded.

61. v9.31 · Curated dependency links share the reserve admission gate

    Aug 20, 2026

    Curated basket links no longer assert a dependency relationship when the same reserve composition is inadmissible for Backing and no live reserve slices are present. The dependency overlay now degrades with the reserve envelope, leaving the existing reserve gap to carry the bounded score consequence instead of publishing an unrelated unreviewed-dependency reason.

62. v9.3 · A verified absence of privileged mint scores what it proves

    Aug 20, 2026

    The mint component's top rung moves from 95 to 100. A derived `none-resolved` posture states that no reviewed control can mint, authorize minting, or expand issuance on this component's scope, so reserving five points at the top of that rung priced a residual the component does not measure. The motivating case is proven outright: LUSD and BOLD resolve `none-resolved` on immutable, owner-renounced deployments where no privileged minter can ever be added, yet their mint component was capped at a ceiling nothing could reach.

63. v9.28 · Scoped open questions extend to bridge controls

    Aug 18, 2026

    The 9.27 scoped-question contract now covers structured bridge controls. A curated bridgeRouteRisk review can author scopedQuestions, each naming one structured control by its id, its exact label, or its controllerChain:controllerAddress pair, with its own question text, review date, and sources. While such a question is fresh, an unresolved named control takes the 69 control-scoped-gap ceiling instead of the 55 control-unverified ceiling: the same ninety-day freshness window, the same reversion when it ages out, and the same rule that a question softens only the control it names. The compiled bridge fact is the route-level merge of its structured controls, so the merged overlay inherits the marker only when every unresolved contributor on that route is named; one unnamed unresolved sibling keeps the hard treatment, mirroring the mint-authority whole-inventory rule at route granularity.

64. v9.27 · A reviewer-scoped open question is better evidence than silence

    Aug 18, 2026

    Economic Control distinguishes a reviewer who investigated a control and recorded exactly what stays unknown from a control nobody has resolved. A curated mint-authority review can now author scoped questions, each naming one control by chain:address or label with its own question text, review date, and sources. While such a question is fresh, the named control's gap takes the new 69 control-scoped-gap ceiling instead of the 55 control-unverified ceiling. The 9.23 boundary migration had recorded several of these as prose (PAXG's Solana Token-2022 authority was reviewed, dated, sourced, and explicitly retained as an unresolved fact), yet the score treated that documented, bounded unknown identically to total ignorance, publishing an 85 A asset at 55 C.

65. v9.26 · A trace of unmapped bridge supply stops being a material control gap

    Aug 18, 2026

    Economic Control grades unattributed bridge supply against the same 10% deployment-materiality floor its per-row check already used. The aggregate check fired on any residue at all, so a rounding tail ($257 of EURC's $470M inventory, $40 of frxUSD's) was published as a material control gap and took the 55 control-unverified ceiling. Because a ceiling-treatment reason also classifies its pillar as limited evidence, the same trace applied the 69 evidence ceiling underneath it, and EURC published C/55 against an 82 it had otherwise earned. Sub-material residue is still published, now as a diagnostic that scores nothing.

66. v9.25 · Undisclosed stops being published as a fact, in both directions

    Aug 18, 2026

    The published access posture's primaryExit now reads the same route set the Exit pillar credits, and reserves "none" for a reviewed-complete, genuinely empty exit surface. Everything else (routes that exist but earn no credit, and a missing, stale, or unsupported exit surface) publishes the new "undisclosed" state. The derivation previously counted only score-eligible routes, so an asset whose Exit pillar was scoring a reviewed issuer, protocol, or eventual redemption simultaneously published "Primary exit: None", asserting an absence its own scoring contradicted. The same release fixes the mirror-image defect in Economic Control, where a missing reconciliation cadence was read as evidence of a periodic one.

67. v9.24 · A reviewed absence of bridge or local issuance is a fact, not a gap

    Aug 18, 2026

    Economic Control now reads three reviewed answers as the measured facts they are. An inventory whose every reviewed route is native issuance is not bridge-exposed even when structured controls govern those canonical deployments; a bridge review whose unattributed supply is immaterial keeps the rows it did review; and a reviewed no-local-issuance exception compiles as a not-applicable mint section when the risk it displaces is carried by a serial-claim parent or by Bridge Risk. The 9.23 boundary release had made each of these compile as missing evidence, collapsing the control pillar to its neutral default and withholding otherwise rateable assets.

68. v9.23 · Mint authority follows native issuance; bridge controls stay route-scoped

    Aug 17, 2026

    Economic Control now binds Mint Authority controls to reviewed canonical native-issuance deployments and compiles structured bridge controls separately for each referenced route. A controller may operate in both domains, but a representation or transfer-rail capability can no longer become global native-mint risk.

69. v9.22 · Every score-bearing gate rotates the methodology-policy digest

    Aug 16, 2026

    Safety Score policy provenance now binds the reshape withhold band, danger and F-grade predicates, material-bridge share band, and score-bearing evidence-expiry windows. Policy-only replay and sensitivity analysis can change those gates through one validated projection and observe a different semantic digest instead of relying on code literals invisible to policy comparison.

70. v9.21 · Reserve classifications follow source identity, not daily weights

    Aug 16, 2026

    A live reserve slice's percentage is now only a scoring weight, never part of the join that attaches reviewed asset class, obligor, liquidity, maturity, or dependency metadata. Adapters can emit a namespace-qualified stable source key; a keyed live row joins one-to-one by that exact key and fails closed on a missing or duplicate reviewed key. Historical unkeyed rows retain a unique normalized-name compatibility join.

71. v9.2 · Budgeted DEX observations stop publishing as a data-feed failure

    Aug 13, 2026

    Exit gap accounting treats the public route-selection bound as the admitted observation set. A populated p4a.8 surface that already carries its budgeted score-eligible routes is complete even when hundreds of other recognised venues failed target construction or sit behind a reviewed model limit. Leftover `quote-failed` attempts no longer keep a payload-saturated surface open; they still fail closed when the bound is not full. A recognised venue whose only remaining gates are reviewed model limits is method-unsupported rather than producer-failed.

72. v9.193 · Reserve freshness follows the accounting state, not its API envelope

    Aug 13, 2026

    DUSD's Makina reserve snapshot now uses the oldest underlying Caliber position-accounting timestamp and the reviewed Machine's three-hour staleness threshold. A newly generated index response can no longer make stale contract accounting score-eligible.

73. v9.192 · Reviewed bounded residuals stop publishing as missing data

    Aug 12, 2026

    Two reviewed-but-unproven residuals stop appearing as missing inputs. A current freeze review whose honest verdict is `possible` is measured as `reviewed-possible-access` instead of `missing-access-review`. Independently subthreshold unmatched bridge-supply rows on a resolved chain no longer mint unknown-identity controls, extending the 9.03 D-J dust rule from unrecognized labels to recognized deployments below the 10% floor.

74. v9.191 · Every bounded attribution keeps its owned open fact

    Aug 12, 2026

    The 9.19 single-count deduplication could collide two distinct reasons that shared a gap identity, keeping the raw entry and dropping the score-bearing one whose bounded-uncertainty attribution then pointed at no owned open fact. On an asset whose mechanism reviews had aged into bounded gaps this made score publication fail its own reconciliation schema. The published fact list now restores any direct reason attribution the deduplication displaced, so every bounded-uncertainty entry reconciles to an owned open fact with its exact code, path, and responsibility.

75. v9.19 · Open facts are counted once and carry the path that produced them

    Aug 12, 2026

    An asset's open-fact mass double-counted every mechanism gap: once through its pillar reason and again through a generic re-emission under a different path, which no consumer could reconcile back to a single gap. The duplicate entries also carried no usable fact path, so a reader could not tell what to disclose to clear them. Separately, a DEX surface on a chain with no registered discovery provider stops being reported as a method floor.

76. v9.18 · A reviewed transfer scope no longer depends on third-party chain supply

    Aug 11, 2026

    The transfer scope test proves a review covers material deployments from per-chain supply, which only the DefiLlama list provides. An asset absent from that list had no supply rows, so the test could never be satisfied and an authored transfer review was withheld as unreviewed. A materiality-only on-chain observation now establishes deployment scope for a bounded cohort, and it is structurally walled off from circulating supply and market cap.

77. v9.17 · Oracle applicability no longer implies oracle safety

    Aug 11, 2026

    Economic Control now separates a genuinely oracleless mechanism from privileged internal pricing, while a reviewed not-applicable oracle path is neutral and emits no scored component instead of manufacturing a green 95.

78. v9.16 · A reviewed access fact stops being reported as unreviewed

    Aug 10, 2026

    Two engine mechanisms made the access branch publish 'we never looked' about assets it had looked at. The transfer scope test is contract-addressed, so a chain-native asset with no contracts by design could never satisfy it; and an inherited freeze verdict whose upstream is not a tracked asset was deleted rather than measured. Both now resolve to an explicit structural fact, and neither invents data where no current review exists.

79. v9.15 · Stress-state digest removed from published cards

    Aug 9, 2026

    The published card drops `stressStateDigest`. The what-if stress evaluator it identified was never wired into any published surface, and no consumer read the digest.

80. v9.14 · Commodity claims get their own archetype

    Aug 9, 2026

    Gold and silver tokens stop being scored as custodial cash. The new `commodity-claim` mechanism archetype asks the questions the asset actually poses (legal title to identified bars, vault custody continuity, bar-list assurance, and operable physical redemption) instead of reusing the fiat-cash reserve component names and smuggling the real semantics in through a mechanism profile.

81. v9.13 · Wrapper caps follow operator ownership

    Aug 8, 2026

    When a risk-absorption product's taxonomy does not reveal who operates the wrapper, its reviewed operator ownership now selects the existing parent-cap form: third-party wrappers use the strategy-vault treatment, while parent-protocol wrappers keep the native-staked treatment.

82. v9.12 · A resolved mint incident costs a full posture class

    Aug 8, 2026

    The resolved-mint-incident decay shipped in 9.1 at the strongest ladder that flipped no grade: a calibration constraint, not a judgment, whose whole effect was one point on one asset. The severity is now chosen on merit: while the incident is recent the mint reads as a concentrated admin, from 24 months as a partially bounded admin, and from 48 months as a bounded admin. Every rung is an existing V9 posture value, and because the last rung sits above every uncapped mint in the incident-carrying set the penalty genuinely expires rather than becoming a permanent tax.

83. v9.11 · Unified exit ladder boundary semantics

    Aug 8, 2026

    The shared exit engine's two descending penalty ladders read their thresholds the same way. The queue-backlog ladder already matched at-or-above; the minimum-redeem ladder matched strictly above, so a route whose minimum landed exactly on a boundary took the gentler band. Both now match at-or-above.

84. v9.1 · One mint grader: incident decay, key custody, and quorum granularity

    Aug 8, 2026

    The standalone Mint Authority Score is retired and its distinct signals are merged into the Economic Control pillar's mint component. A resolved mint incident now decays instead of disappearing, MPC/HSM key custody reclassifies an externally-owned mint key, multisig quorum granularity replaces a binary strong-quorum test, and Safe module evidence is a small modifier. This is the only deliberate score-moving change in the consolidation wave.

85. v9.07 · Native input pipeline replaces the V8-shaped bridge

    Aug 7, 2026

    The V9 compiler now captures a native input schema; the retired V8 scoring engine no longer executes, and no published score, grade, pillar, breakdown, or reason changes.

86. v9.06 · Exit backup credit scales with route quality

    Aug 6, 2026

    V9 Exit now scales its bounded backup-route credit by the backup route's own score and presents primary-route, backup, and completion measurements separately.

87. v9.05 · Wrapper local controls retain partial evidence

    Jul 30, 2026

    Strategy-vault wrapper loss-control facts can now use reviewed local controls from a partial deployment inventory while unresolved controls remain bounded and risk-transfer credit remains disabled unless separately documented.

88. v9.04 · Unsupported coverage separated from producer failure

    Jul 29, 2026

    Exit-coverage, route-evidence, and dependency gaps that no supported adapter can observe are now attributed to unsupported methodology instead of transient producer failure, deployment census coverage is reported per chain, and a peg with no usable price but an adverse record becomes measured adverse.

89. v9.03 · Subthreshold chain-label pool tolerance

    Jul 29, 2026

    Subthreshold unrecognized chain-label supply pools remain tolerated by the bridge-materiality proof but no longer surface as public evidence-responsibility facts.

90. v9.02 · Causal responsibility provenance

    Jul 28, 2026

    V9 now preserves causal responsibility through inherited and upstream evidence paths, distinguishes producer-unpriceable exit outputs from issuer non-disclosure, and retains reviewed controls in partial inventories without changing score or grade formulas.

91. v9.01 · Economically material route capacity

    Jul 28, 2026

    Exit routes now need economically material capacity, and sub-1% completion cannot score above 50 even when the absolute-capacity floor is met.

92. v9.0 · Safety Score V9 becomes the active model

    Jul 27, 2026

    Pharos activates the identity-bound V9 model with three risk pillars, explicit evidence responsibility, structural ceilings, and fail-closed publication health.

93. v8.17 · Aggregate pool balances remain TVL evidence

    Jul 13, 2026

    Liquidity / Exit no longer labels balance-measured aggregate pool TVL as reserve-based AMM simulation when the retained row lacks an exact invariant, fee, output identity, and executable capacity curve.

94. v8.16 · DEX exit scoring carries evidence quality

    Jul 12, 2026

    Liquidity / Exit now retains DEX coverage, measurement, effective-TVL, and deployment-access evidence and applies conservative ceilings when the published DEX score rests on reserve simulation, generic TVL proxies, synthetic fallback, or inaccessible-only coverage rather than measured executable depth.

95. v8.15 · Dependency scoring is deterministic across cycles and unavailable upstreams

    Jul 12, 2026

    Dependency Risk now rejects unresolved graph cycles before publication, falls live-created cycles back to curated dependency sets, and scores fully unavailable upstreams through the same blend, weak-dependency penalty, and wrapper/mechanism ceilings used for partially unavailable exposure.

96. v8.14 · Dependency derivation rejects self-links and duplicate variant backing

    Jul 12, 2026

    Dependency Risk now suppresses self-referential reserve links at the adapter and canonical resolver boundaries, treats tracked variants as one serial wrapper claim on their parent instead of counting the parent's backing twice, and publishes typed dependency-source and fallback provenance.

97. v8.13 · All-unmapped live reserve dependencies fall back to curated links

    Jun 19, 2026

    Dependency Risk now treats score-grade live reserve snapshots with no mapped tracked-asset links as insufficient dependency evidence when curated reserve or manual dependency links exist. Partial live mappings remain authoritative, and only the all-unmapped live case falls back to curated/manual dependency evidence.

98. v8.12 · Bridge-route risk enters Decentralization

    Jun 12, 2026

    Reviewed bridge-route profiles now feed the Decentralization dimension through a penalty-only blend after CDP oracle scoring and before Mint Authority. L2BEAT Interop data is used as static review evidence and queue material, while live scoring consumes only curated Pharos bridgeRouteRisk metadata.

99. v8.11 · Oracle-risk profiles gain provenance and branch handling

    Jun 12, 2026

    Reviewed CDP oracle-risk profiles now carry review provenance, confidence, optional collateral-branch rows, and a report-card presentation object. When branch rows are present, the Decentralization oracle blend uses the weakest branch/profile score so multi-collateral CDPs cannot hide a weaker oracle path behind an aggregate label.

100. v8.1 · CDP oracle setup enters Decentralization

     Jun 12, 2026

     Crypto-backed CDP stablecoins can now carry a reviewed oracle-risk profile. When present, the Decentralization dimension applies a penalty-only oracle setup blend for CDP liquidation and redemption price feeds: decentralization = min(current, 0.75 x current + 0.25 x oracle score). Robust oracle setups never lift the score, but weak, single-source, stale, or opaque feeds can drag it down.

101. v8.0 · Mint Authority Score enters Decentralization

     Jun 11, 2026

     The Decentralization dimension now applies a penalty-only Mint Authority blend: decentralization = min(current, 0.65 x current + 0.35 x Mint Authority Score). A weak privileged-mint path can drag the dimension down; a strong one never lifts it. Coins without a rated Mint Authority Score are unchanged.

102. v7.291 · Degraded-input history guard

     Jun 6, 2026

     Safety Score scoring is unchanged, but degraded report-card inputs no longer create durable grade-history transitions and the compact score cache now exposes input-staleness metadata to dependent consumers.

103. v7.29 · fxSAVE live redemption capacity

     May 27, 2026

     fxSAVE's Liquidity / Exit input can now consume fresh ERC-4626 live redemption capacity instead of the prior low-confidence heuristic strategy-buffer route.

104. v7.28 · FreezeWatch curated upstream review audit

     May 25, 2026

     A full review of the active assets previously shown as FreezeWatch `No` corrects direct, possible, and upstream exposure classifications while keeping blacklist capability descriptive and unscored.

105. v7.27 · FreezeWatch removes Dilutable admin-mint tier

     May 24, 2026

     FreezeWatch now uses a four-status freeze model: Yes, Upstream, Possible, and No. Admin mint authority is retained in the descriptive Mint Authority review instead of being mixed into freeze exposure.

106. v7.26 · NAV wrapper peg scoring uses configured peg references first

     May 21, 2026

     NAV and savings wrappers with a configured peg reference now ignore their own appreciating share price for Safety Score peg and active-depeg caps, using the referenced base stablecoin's peg state instead.

107. v7.25 · Wrapper decentralization inherits from tracked parent assets

     May 15, 2026

     Tracked wrappers with a resolvable parent asset now derive Decentralization from the wrapped asset's Decentralization score, with the same wrapper-kind haircut used for dependency ceilings.

108. v7.24 · Capacity-aware redemption effective-exit blending

     May 12, 2026

     Liquidity / Exit now consumes Redemption Backstop v4 current-capacity semantics, scaling redemption uplift by executable capacity, model confidence, and independence from DEX liquidity.

109. v7.23 · sGHO and Reservoir reserve coverage refinements

     May 12, 2026

     Additional reserve-sync refinements promote clean independent snapshots for sGHO, Reservoir savings variants, USD.AI, and weekly NAV feeds without widening the score-grade evidence policy.

110. v7.22 · Additional independent NAV and wrapper reserve feeds

     May 12, 2026

     More RWA NAV tokens and tracked savings wrappers now use direct independent reserve feeds instead of curated validation or weak liveness probes.

111. v7.21 · crvUSD direct on-chain LLAMMA reserve reads

     May 12, 2026

     crvUSD reserve scoring can now use direct Curve ControllerFactory and LLAMMA band reads with latest-state on-chain freshness instead of the timestampless Curve markets API.

112. v7.20 · Expanded Dilutable admin-mint classification with source provenance

     May 11, 2026

     A full tracked-universe follow-up to the Dilutable rollout expands the tier to strong uncapped admin-mint candidates and records a contract-source link for every Dilutable override.

113. v7.19 · Dilutable freezability tier and upgradeable-proxy / admin-mint audit

     May 11, 2026

     A re-audit of 22 stablecoins marked `Freezable: No` introduces a new `Dilutable` tier for tokens whose admin can mint without bound, and reclassifies five coins to `Yes` after finding upgradeable proxies or active admin freeze surfaces.

114. v7.18 · Redemption freshness and daily-limit eligibility gates

     May 10, 2026

     Liquidity / Exit now consumes the stricter redemption-backstop live telemetry policy, so unverified nested redemption freshness is excluded unless route-specific lower-bound approval exists and live daily limits cap usable scoring capacity.

115. v7.17 · USD3 centralized-collateral dependency correction

     May 7, 2026

     USD3 / Web 3 Dollar is reclassified from DeFi to CeFi-dependent because its Reserve Protocol DTF basket is concentrated in centralized stablecoin-derived collateral.

116. v7.16 · Follow-up freezability classification audit

     May 6, 2026

     A follow-up review of six disputed `Freezable: No` classifications moves HomeCoin to `Possible` and leaves the other reviewed assets unchanged.

117. v7.15 · Direct freezability metadata audit

     May 5, 2026

     The resolved `Freezable: No` cohort was reviewed against token-level freeze, denylist, blacklist, pause, and role-burn controls, moving confirmed direct-control assets out of the unfreezable bucket.

118. v7.14 · Live reserve dependencies align with scoring

     Apr 24, 2026

     Score-grade live reserve slices with tracked `coinId` links now drive Dependency Risk, raw dependency inputs, topological ordering, and the public dependency graph together.

119. v7.13 · Reserve-driven blacklist risk moves to Upstream

     Apr 22, 2026

     `Possible` blacklist labeling is now reserved for curated direct token or vault freeze controls, while reserve- and custody-driven exposure resolves as `Upstream`.

120. v7.12 · sBOLD joins tracked risk-absorption variants

     Apr 22, 2026

     The tracked parent-variant framework now includes K3 sBOLD as a `risk-absorption` child of BOLD because Liquity Stability Pool loss-absorption dominates the wrapper's extra risk surface.

121. v7.11 · Strategy-vault children join the tracked variant framework

     Apr 22, 2026

     The tracked parent-variant framework now covers the four highest-confidence strategy-vault children whose user expectation is still direct exposure to a tracked parent stablecoin.

122. v7.10 · Bond-maturity variants join the parent-linked wrapper framework

     Apr 22, 2026

     The tracked variant framework now covers bond-maturity wrappers, starting with bUSD0 as a bond leg over USD0.

123. v7.09 · Tracked wrapper and staked variants become explicit parent-linked cards

     Apr 22, 2026

     Tracked savings and risk-absorption wrappers now carry an explicit parent relationship in Safety Scores, so dependency ceilings, parent caps, and stressed recomputation no longer depend on reserve-shape quirks.

124. v7.08 · Strategy reserve tier clarification

     Apr 21, 2026

     Reserve-risk tiering now distinguishes transparent spot or wrapped market exposure from actively managed strategy books; externally managed market-neutral, basis, perp, LP, private-deal, or custody-dependent strategy reserves are high unless stronger granular evidence shows the slice is only an idle stablecoin or cash-equivalent buffer.

125. v7.07 · Stale DEX liquidity stays usable for Exit scoring

     Apr 18, 2026

     Liquidity / Exit and the redemption-backstop snapshot both now reuse the last-known DEX liquidity score when its freshness runway has elapsed, instead of suppressing it and cascading documented offchain-issuer routes (USDC, USDP, USDT, GUSD, …) to NR on routine sync-dex-liquidity cron lag.

126. v7.06 · GHO residual decomposition

     Apr 16, 2026

     The GHO reserve adapter now decomposes residual issuance across active facilitators and routes unmapped labels through the standard material-unknown-exposure validator, replacing the GHO-specific aggregated-residual warning.

127. v7.05 · Primary-market exit bonus

     Apr 16, 2026

     Liquidity / Exit now lets documented offchain issuer redemption add a DEX-gated primary-market exit bonus without treating eventual redemption as a standalone liquidity substitute.

128. v7.04 · Redemption freshness runway

     Apr 15, 2026

     Liquidity / Exit now keeps current redemption backstops through normal 4-hourly cron lag instead of self-suppressing immediately after one sync interval.

129. v7.03 · USTB live liquidity capacity

     Apr 15, 2026

     Liquidity / Exit can now use USTB's current Superstate liquidity capacity while keeping NAV/AUM separate from immediate exit capacity.

130. v7.02 · frxUSD live redemption capacity

     Apr 15, 2026

     Liquidity / Exit can now use frxUSD's fresh Frax balance-sheet redemption capacity while preserving route-status and capacity-ratio fail-closed guards.

131. v7.01 · Safety-eligible redemption tiers

     Apr 15, 2026

     Liquidity / Exit now distinguishes standalone redemption-route quality from Safety Score-eligible exit capacity.

132. v7.0 · Independent NAV and bundle-oracle reserve feeds

     Apr 15, 2026

     Additional proof-style reserve feeds now use independent timestamped sources instead of weak single-asset liveness probes, including Chainlink-style NAV oracles, Frax's v2 balance sheet, and USD1's bundle oracle.

133. v6.99 · Asymmetry USDaf live reserve freshness promotion

     Apr 15, 2026

     USDaf's Asymmetry reserve feed now preserves the protocol API timestamp and normalizes branch symbols before risk classification, allowing clean fresh snapshots to qualify for live collateral passthrough.

134. v6.98 · Timestamp-backed reserve feeds restored to collateral passthrough

     Apr 15, 2026

     Several live reserve adapters now consume source timestamps already exposed by their upstream dashboards or disclosure pages, allowing clean fresh snapshots to qualify for collateral-quality passthrough without weakening the global freshness gate.

135. v6.97 · Active-depeg caps use event peak and stale redemption inputs are suppressed

     Apr 15, 2026

     Safety Score active-depeg handling now uses the open event's peak severity for final caps, removes the legacy peg-dimension cap, suppresses stale redemption rows, and makes dependency/stress behavior more conservative.

136. v6.96 · Severe active depegs disable weak redemption uplift

     Apr 14, 2026

     Liquidity / Exit no longer accepts static or non-live-direct redemption uplift during severe active depegs unless current live-open redemption evidence exists.

137. v6.95 · Direct inherited freeze risk now counts custodied BTC wrappers and issuer-seizable collateral

     Apr 7, 2026

     Blacklistability attribution now treats centralized-custody BTC wrappers, tokenized gold, and issuer-seizable tokenized collateral as direct reserve-side freeze exposure when they dominate a stablecoin's backing mix.

138. v6.94 · NAV wrappers can inherit peg risk from a referenced base stablecoin

     Apr 6, 2026

     NAV tokens that are explicit wrappers over a stablecoin can now inherit peg stability from a configured base asset instead of receiving an automatic neutral peg multiplier.

139. v6.93 · Steeper peg multiplier + active depeg grade cap

     Apr 5, 2026

     Peg multiplier exponent raised from 0.2 to 0.4 so peg stability impacts grades more meaningfully. Active depegs above 1000 bps now cap the overall score at D; above 2500 bps caps at F.

140. v6.92 · Direct Liquity v1 reserve observation for LUSD

     Apr 4, 2026

     LUSD now uses direct on-chain Liquity v1 system-collateral telemetry instead of the generic proof-style liveness probe, so fresh clean snapshots qualify as independent live reserve evidence.

141. v6.91 · Reserve-side blacklist exposure heuristics

     Mar 30, 2026

     Blacklistability attribution began scanning curated and live reserve labels plus reserve-rail text for stablecoin, wrapper, and CEX custody clues; v7.13 later promoted any matched reserve path to Upstream.

142. v6.9 · Explicit inherited blacklistability

     Mar 30, 2026

     Blacklistability attribution now separates mutable-contract risk from inherited collateral freeze risk, and no longer treats centralized-dependent governance as enough evidence on its own.

143. v6.8 · On-chain reserve freshness alignment

     Mar 25, 2026

     Direct latest-state reserve adapters now explicitly mark on-chain freshness as not-applicable, allowing clean independent branch-balance snapshots to participate in collateral-quality passthrough again.

144. v6.7 · CeFi-dependent blacklistability fallback

     Mar 25, 2026

     Blacklistability attribution now defaults centralized-dependent stablecoins to possible unless an explicit override or inherited-reserve classification is more specific.

145. v6.6 · Timestamp-backed live reserve scoring gate

     Mar 24, 2026

     Collateral-quality passthrough now excludes timestamp-less or explicitly unverified live reserve feeds unless the feed carries verified freshness or is intrinsically on-chain.

146. v6.5 · Clean independent live reserve passthrough

     Mar 22, 2026

     Collateral-quality passthrough now requires clean independent live reserve evidence, excluding weak probes and warning-bearing snapshots from Safety Score scoring.

147. v6.4 · Live Liquity redemption fee telemetry

     Mar 22, 2026

     The liquidity dimension keeps the same structure, but Liquity-style formula routes can now use current on-chain redemption fees when live reserve telemetry is available.

148. v6.3 · Documented-bound Liquity redemption confidence

     Mar 22, 2026

     Fully on-chain Liquity redemption routes with documented full-system redeemability now qualify as stronger exit-liquidity evidence without being presented as immediate buffer capacity.

149. v6.2 · Independent live reserve contract tightening

     Mar 22, 2026

     Collateral-quality passthrough now only uses fresh authoritative independent live reserve feeds, preventing validated-static probes from overriding curated scoring and allowing single-bucket live feeds to count.

150. v6.1 · Redemption confidence gating and capacity semantics

     Mar 22, 2026

     Liquidity scoring now distinguishes strong redemption evidence from heuristic routes and stops presenting eventual issuer redemption as immediate buffer capacity.

151. v6.0 · Custody model tiers, mature-alt-l1, 2-factor Resilience

     Mar 21, 2026

     Four structural changes: 6-tier custody model replaces 3-tier, new mature-alt-l1 chain tier for Solana/BNB, Resilience becomes 2-factor (blacklist descriptive only), 5-band chain penalty with wrapper exemption.

152. v5.9 · Classification corrections: centralized-custody DeFi coins

     Mar 20, 2026

     Three DeFi-classified coins with >50% centralized custody exposure reclassified to centralized-dependent based on live reserve data.

153. v5.8 · Live reserve passthrough for collateral quality

     Mar 14, 2026

     Collateral quality scoring now consumes live reserve snapshots when available, using hourly data from reserve_composition instead of curated metadata.

154. v5.7 · Canonical ETH wrapper reserve alignment

     Mar 13, 2026

     Reserve-derived collateral quality now treats direct ETH and canonical wrapped ETH as the same very-low-risk asset class.

155. v5.6 · Exit-liquidity integration

     Mar 12, 2026

     Safety Score liquidity now evaluates modeled exit quality via redemption backstops, not just raw DEX depth.

156. v5.5 · Peg score fairness for young coins

     Mar 1, 2026

     Three peg-scoring fixes prevent young coins with repeated brief depegs from being over-scored.

157. v5.4 · No-liquidity penalty

     Feb 28, 2026

     When Liquidity is NR (no DEX data), overall score receives a 10% penalty instead of redistributing weight.

158. v5.3 · Remove chain infra from Resilience

     Feb 28, 2026

     Chain infra double-counting fixed: removed from Resilience sub-factors, now exclusively in Decentralization.

159. v5.2 · Immutable-code governance tier

     Feb 28, 2026

     Added immutable-code as highest GovernanceQuality tier (score 100) for protocols with no admin keys or upgrade path.

     Safety Score v5 GovernanceQuality tiers
160. v5.1 · Regulated-entity tier + blacklist softening

     Feb 28, 2026

     Blacklist scores softened (blacklistable 0->33) and regulated-entity governance tier added for licensed issuers.

161. v5.0 · GovernanceQuality + universal dependency scoring

     Feb 28, 2026

     Decentralization moved from 3-tier to 6-tier GovernanceQuality. Dependency scoring became universal (not CeFi-only).

162. v4.1 · Liquidity weight increase + reclassifications

     Feb 27, 2026

     Liquidity weight raised to 30% as the most defining stablecoin attribute. Five coins reclassified to decentralized.

163. v4.0 · Peg stability becomes a multiplier

     Feb 27, 2026

     Biggest structural change: peg stability removed from weighted dimensions and applied as a post-hoc power-curve multiplier.

     Safety Score v4 pegScore multiplier examples
164. v3.3 · Reserve-derived collateral quality

     Feb 27, 2026

     For coins with curated reserves arrays, collateral quality is now a weighted average of reserve risk tiers instead of an enum fallback.

     Safety Score v3.3 reserve risk tiers
165. v3.2 · Dependency type ceilings

     Feb 27, 2026

     New DependencyType field (wrapper/mechanism/collateral) with ceilings preventing wrappers from scoring above upstream.

166. v3.0 · Resilience 4-factor model

     Feb 26, 2026

     Complete Resilience redesign from 2 factors to 4 equal sub-factors: chain risk, collateral quality, custody model, blacklist capability.

     Safety Score v3 resilience sub-factors
167. v2.0 · Remove Safety dimension

     Feb 26, 2026

     Safety dimension removed due to sparse Bluechip rating coverage (~20/142 coins). Bluechip display kept for informational use.

168. v1.0 · Initial implementation

     Feb 25, 2026

     First release with six weighted dimensions: Peg Stability, Liquidity, Safety, Resilience, Decentralization, and Dependency Risk.

     Safety Score v1 weighted dimensions