Recent content, feature, membership, fix, and security updates for returning members.
Membership
Saved payment methods and default auto-renewal pipeline - v2.36
Members can now manage multiple saved payment methods with default priority, while billing operations gain an authenticated renewal runner that charges default reusable methods and synchronizes entitlement lifecycle updates.
This release adds member payment-method management for cards and supported wallets, including list/default/remove flows and checkout save-card support. It also introduces a renewal runner endpoint that attempts recurring charges from the default reusable tokenized method and feeds resulting payment outcomes through the existing membership lifecycle synchronization and audit pipeline.
Fix
Donation intake paused and donation routes hidden - v2.35
Donation intake is temporarily disabled. Donation buttons and discovery links are removed, and /donate now returns strict 404.
This release temporarily pauses donation intake while payment operations are under review. The site no longer shows donation buttons or donation discovery links in header, footer, sitemap, or command palette. The /donate route is intentionally closed with strict 404 behavior until donation intake is re-enabled.
Fix
Quantitative article publishing timing - v2.13
Corrected the publication timing for the new public and Pro quantitative methods articles so they are available immediately after deployment.
This release corrects the publication timestamp for the Quantitative Analysis Methods Primer and Pro Risk Review Framework so both articles are visible according to their intended Free and Pro access levels after deployment.
Content
Quantitative methods content refresh - v2.12
Refocused public content on quantitative analysis methods, added one public methods primer, and added one Pro-only risk review framework.
This release updates public navigation, legal/footer language, learning paths, glossary, research-mistake lookup, tools directory, and article inventory so the website presents a clear quantitative analysis and methods focus. It publishes a free Quantitative Analysis Methods Primer and a Pro-only Risk Review Framework while preserving payment, membership, and legal behavior.
Feature
Admin support tools - v2.11
Added scalable admin support tools for finding members, handling account recovery, and hiding selected articles from public view.
This release upgrades admin operations with member search and filters, paginated support workflows, account recovery actions, reversible member deactivation/anonymization controls, support audit history, and bulk article hiding that keeps content available to admins.
Fix
Profile image upload autosave - v2.10
Updated account profile image uploads so the uploaded image is saved immediately without requiring a second Save settings click.
This release makes the account settings profile image upload action persist the new profile image as soon as the upload succeeds. Members can still use Save settings for name and username changes.
Fix
Profile image file picker - v2.9
Updated account profile image controls so the image action opens the device file picker instead of appearing unavailable before selection.
This release makes the account settings profile image action open the device file picker when no image has been selected. After a file is chosen, the same control switches to upload the selected image.
Fix
Profile image upload controls - v2.8
Clarified account profile image upload controls so members can see when file selection is required and avoid unavailable remove actions.
This release updates account settings to make profile image upload controls clearer. The upload action now explains that a file must be selected first, and the remove image action is unavailable when there is no current or draft image to remove.
Security
Moyasar checkout metadata hardening - v2.7
Hardened Pro checkout verification so paid Moyasar callbacks must include trusted membership metadata before member entitlements can sync.
This release requires verified Moyasar Pro checkout payments to carry InQuantWeTrust membership metadata for the signed-in member, checkout source, and billing cycle before entitlement synchronization runs. Payments missing trusted metadata now fail safely without changing membership access.
Security
Admin access recovery - v2.6
Added owner-only admin access recovery with API-key authentication and hardened password reset recovery for locked accounts.
This release adds an owner-only admin recovery endpoint protected by ADMIN_DATA_API_KEY and limited to emails configured in ADMIN_EMAILS. It also clears account lockout state after successful password reset so recovered users can sign in immediately.
Fix
Members dashboard closure enforcement - v2.5
Enforced strict closure of /members/dashboard across dynamic member-profile routing so the removed dashboard path cannot reopen.
This release adds an explicit disallowed-path guard in members dynamic routing so /members/dashboard always returns strict 404, even if a matching member username exists in production data.
Fix
Membership navigation and legal contact cleanup - v2.4
Removed the member dashboard surface, moved membership status next to profile in header, hardened command palette blocked-route filtering, and standardized support email usage.
This release removes the dedicated /members/dashboard surface and keeps it closed by default, relocates FREE/PRO status visibility to the profile trigger area in header, blocks command palette navigation to disallowed internal paths, and standardizes legal/contact support references to admin@inquantwetrust.com.
Fix
Changelog consistency and release gate hardening - v2.3
Backfilled missing production changelog releases via migration and hardened release gating so seed-only changelog edits no longer satisfy release checks.
This release backfills missing release-note rows into production through a Prisma migration because deployment applies migrations, not seed data. It also tightens the release gate to require changelog updates through persistent admin changelog surfaces or changelog-targeted migration SQL changes.
Feature
Forum home layout and create-flow refresh - v2.2
Redesigned /forum with top actions, wider discussion rows, slimmer search, dedicated create/contributors pages, and 10 discussions per page.
This release removes the old forum hero/sidebar boxes, promotes Create discussion and Top contributors actions above search, introduces dedicated /forum/new and /forum/contributors pages, and expands discussion cards into a wider single-column view. Signed-in members now see a compact welcome/status strip, and discussion listing density is tuned to show up to 10 topics per page.
Fix
Contact email update and operator privacy wording - v2.1
Public contact surfaces now show admin@inquantwetrust.com, and operator wording now uses InQuantWeTrust instead of a personal full name.
This release updates contact and legal components so visitors can reach the admin support mailbox directly, while replacing personal full-name operator wording with an InQuantWeTrust operator label on public legal surfaces.
Membership
Legal policy pages and checkout disclosures - v2.0
Published Terms, Privacy, Refund Policy, and Disclaimers pages, added legal footer navigation, and surfaced policy links directly in Pro checkout.
This release adds dedicated public legal pages and a legacy /disclaimer alias redirect, updates footer navigation to include legal policy links, and adds checkout-level policy disclosures so members and payment reviewers can access legal terms without leaving the payment journey.
Fix
Protected sign-in callback propagation fix - v1.9
Protected account, membership, publish, and dashboard routes now pass safe internal callbacks so sign-in returns members to the page they requested.
This release updates SignInRequired to include callbackUrl propagation and applies it across protected member and author/publisher surfaces. Callback targets are constrained to internal paths only and encoded into /sign-in, preventing open redirect behavior while preserving the intended return path.
Fix
Admin data API auth semantics hardening - v1.8
Admin data endpoints now return auth-required responses for missing credentials and only surface API-key configuration errors when bearer-token mode is explicitly used.
This release tightens shared admin-data auth behavior so unauthenticated probes consistently return 401 while preserving admin session access. API-key mode now fails with an explicit 503 configuration message only when a bearer token is provided but ADMIN_DATA_API_KEY is not configured.
Fix
Homepage copy and recommended slug typo fix - v1.7
Corrected homepage grammar and fixed the recommended article canonical slug, including a permanent redirect from the legacy typo URL.
This release improves homepage statement wording and recommended article link text quality. The recommended article now uses /recommended/why-you-have-to-consider-to-become-quant as the canonical path, while /recommended/why-you-have-to-concider-to-become-quant permanently redirects to preserve existing links.
Fix
Topic click-path route hygiene hardening - v1.6
Fixed broken topic click paths by limiting /topics links to approved taxonomy routes while preserving strict 404 behavior for unknown slugs.
This release prevents non-routable labels from rendering as internal /topics links across discovery surfaces. Topic hubs now aggregate approved structured topics plus core-topic legacy compatibility only, so unknown topic aliases remain strict 404.
Fix
Deployment safety gates and rollback clarity - v1.5
Hardened production deployment with pre-deploy quality gates, migration safety checks, strict release gating, and clearer rollback triggers for incident response.
This release adds mandatory pre-deploy checks for logic, routes, type safety, linting, and build health. It also introduces migration safety and release hygiene gates with explicit override rationale requirements, plus clearer rollback trigger guidance for production incidents.
Membership
Moyasar callback failure handling clarity - v1.4
Improved checkout callback handling so failed, refunded, or voided payments clearly report a failed outcome instead of a pending state, while keeping membership entitlements unchanged.
This release updates lifecycle transition handling for initial failed payment events and improves callback messaging so members no longer see a technical transition error after a declined transaction. Failed/refunded/voided outcomes are now shown explicitly as failed checkout states.
Membership
Clear membership status indicators - v1.3
Added explicit Free/Pro status badges on account and membership pages so members can confirm entitlement immediately after checkout.
This release adds a clear membership status panel on /membership and a matching membership chip on /account. Members now get immediate visual confirmation of Free vs Pro state and billing cycle after returning from Moyasar checkout.
Membership
Member checkout and callback verification (Moyasar) - v1.2
Added in-app Pro membership checkout with server-side payment verification callback and stronger webhook auth compatibility for production-safe lifecycle sync.
Members can now complete Pro checkout in-app and return through a verification callback that confirms payment status, amount, currency, and member metadata before synchronizing entitlements. Moyasar webhook auth handling now supports both signature headers and payload secret tokens so lifecycle updates stay reliable across dashboard configurations.
Membership
Recurring Pro billing lifecycle (Moyasar) - v1.1
Added explicit idempotent lifecycle reconciliation plus webhook transitions so Pro access stays aligned with billing events, including downgrade drift correction.
This release introduces explicit Pro subscription lifecycle states, Moyasar webhook idempotency, guarded admin/internal reconciliation runs, and detailed transition audits so entitlement upgrades or downgrades can be traced and corrected safely.
Feature
Search relevance and moderation triage controls
Improved search ranking signals and added report-queue filters to speed up moderation decisions.
Search now weighs exact matches in result titles, slugs, and tags more strongly, with better tie-breaking on recently updated entries. Admin report moderation now includes status chips, target filtering, queue search, and triage-focused sort modes.
Feature
Structured content discovery
Added topic taxonomy, author profile pages, and a public changelog for release notes.
This release makes article discovery more consistent with normalized topics, byline-linked author profiles, and dated release notes.
