Stellar Index v0.25.2

[v0.25.2] — 2026-08-05

Fixed

• A freeze can no longer escalate to operator-only without a single
  scored evaluation. During the ~30-minute post-restart confidence
  bootstrap every bucket is unscored, so a freeze rehydrated across a
  deploy could never accumulate an unfreeze streak while its hold
  expiries still burned extensions — it marched deterministically to
  ESCALATED (live occurrence: crypto:XLM/fiat:GBP 24h escalated
  entirely inside the v0.25.0 restart window). An unscored expiry now
  slides the hold without consuming an extension
  (TransitionHeldUnscored); ADR-0019's 2-hour escalation budget
  thereby counts two hours of SCORED asking. Escalated freezes still
  never auto-unfreeze.
• The permanently-firing dex_nonstandard_decimals_detected alert
  was removed — it compared an all-time counter to zero, so once any
  nonstandard token traded it fired forever (three already-confirmed,
  auto-normalized aquarius tokens held it active). The awareness
  signal lives on the dashboard metric; the actionable failure mode
  keeps its own correction_failing ticket alert.

Changed

• Classic-asset slugs are now the fully-qualified asset_id
  (migration 0135, superseding 0134's abbreviation one day later).
  An 8-character issuer prefix is a ~2^32 vanity-grind — minutes on
  consumer GPUs, the same economics dust-attack address mimicry
  already exploits — and the abbreviation bought nothing but URL
  length. The full form is self-certifying (the URL IS the identity,
  nothing to grind or front-run) and deletes the writer's whole
  collision apparatus, since the slug equals the primary key's value.
  Slug resolution on /v1/assets/{id} is now effectively a
  case-insensitive canonical-id match. Verified-currency slugs
  (usdc, aqua) are unaffected — that's the catalogue namespace.
• Explorer HTML now ships Cache-Control: public, max-age=0, must-revalidate — a zone-level cache rule was edge-caching page
  HTML for 7 days, so users saw day-old baked prices and pre-redesign
  chart code under three successive deploys. Fingerprinted assets
  keep their immutable year. (The zone rule itself is
  dashboard-managed and needs the operator: respect-origin + one
  purge.)
• The /assets/* runtime shell carries generic metadata ("Asset ·
  Stellar Index") instead of baking the literal "shell" title, and the
  client view restamps document.title once the real asset loads.