What shipped this week.

Public marketplace launches at /marketplace

Anonymous visitors can now browse every active, merchant-approved offer with live commission rates, attribution windows, and approval timers — no sign-in required.

• Server-rendered listing for SEO indexing.
• Sort by newest, commission, or fastest approval.
• PII stays gated: tracking links and destination URLs require an affiliate account.

Trust Center, Security, and Compliance pages

Dedicated pages for our security posture (6-layer defense-in-depth), regulatory frameworks (GDPR, CCPA, PCI-DSS, SOC 2 path), and subprocessor list.

Persona landings for merchants and affiliates

Rebuilt /merchants and /affiliates around the three billing modes and the ledger-grade finance export, with FAQPage schema for richer search results.

Conduit™ ledger v2 — append-only balance entries

Merchant balances now reconstruct byte-for-byte from the balance_ledger_entries table. Refunds become reversal rows, never deletes.

• Idempotent on Stripe event ID.
• Finance exports (CSV / JSON / NetSuite) run directly off the ledger.
• Backfill migration completed for all historical commissions.

Per-table RLS audit + signing-key rotation

Reviewed every public-schema policy. Webhook signing keys can now be rotated from the merchant dashboard without downtime.

Server-side click capture, p95 < 35ms

Moved click tracking from edge function to a TanStack server route running at the closest region. Median latency dropped from 110ms to 22ms.

Net-30 invoicing for credit-approved merchants

Operator-tier merchants can now settle commissions on Net-30 terms with per-customer credit limits.

Duplicate-webhook protection

processed_webhook_events table now hard-locks duplicate Stripe deliveries on event ID. Eliminates the rare double-credit edge case observed in March.