Changelog
Everything that's shipped, in reverse-chronological order. Security and policy changes are flagged so you can see what affects you at a glance.
Last updated · May 2026
Subscribe
For now, follow @ticpoz on X or check this page weekly. A proper RSS feed and changelog email list are planned for v1.1.
v1.0 · beta2026-05-13launch
Public beta launch
- Domain ticpoz.com goes live with a public marketing site and gated app.
- Quant-AI strategy builder running on a frontier language model behind a PII-scrubbing layer.
- cTrader Open API and MetaTrader 5 broker bridges shipping.
- Per-user dedicated public IPv4 for every signup — prop-firm-friendly outbound.
- StrategySpec engine running with 15-second tick cadence and engine-side risk caps.
- Real-broker backtester (cTrader tick data, broker-actual spread modelling).
- Live trading terminal with WebSocket price streaming.
- Admin panel locked to ADMIN_IP_ALLOWLIST + IP allowlist middleware.
- Security baseline: modern memory-hard password hashing with server-side secret, strong symmetric encryption on broker credentials at rest, signed expiring session tokens.
- Compliance baseline: site-wide risk disclosure, nominative-fair-use disclaimers, 14-day money-back policy.
v0.9 · private beta2026-05-11feature
Per-user dedicated IPs
- Dedicated IPv4 allocation wired into the signup flow.
- Kernel policy-routing rules bind each user's broker traffic to their assigned IP.
- Admin "Audit IPs" panel surfaces orphan IPs (paid but unmatched) for cleanup.
- Two-phase IP release (unassign → wait → delete) prevents billing leaks on user delete.
v0.82026-05-10security
Encrypted-at-rest broker credentials
- cTrader OAuth tokens, MT5 API keys, and integration keys now encrypted with a strong, modern symmetric cipher.
- Each encrypted record has a unique initialisation vector so a stolen export by itself is opaque.
- Legacy plaintext records auto-migrated on first write after deploy.
- Encryption key kept in env config, separate from data store.
v0.72026-05-08feature
WebSocket terminal
- Live price streaming for any cTrader symbol, multi-timeframe, multi-account.
- TLS 5036 to cTrader proxied through our /ws bridge with per-user IP binding.
- Sub-second tick rendering; chart and depth ladder update in lockstep.
v0.62026-05-05policy
14-day money-back + clarified Terms
- Reconciled Pricing-FAQ refund promise with Terms §10 — both now match.
- New /refund page is the binding canonical refund policy.
- EU/UK 14-day right of withdrawal explicitly mirrored.
Pre-history
TICPOZ began as a private build in late 2024. v0.1–v0.5 were unreleased internal milestones building the StrategySpec engine, AI builder prototype, and broker bridges. We started the public changelog at v0.6 (May 2026) when the platform became externally observable.
Related
- Security — the current posture (versioned in this file).
- Sub-processors — additions logged here too.
- Status — live operational state.
- Blog — deeper context on the bigger releases.