v2.28.0

Features

• Intent-driven exact venues and ordered action sequences — backtests discover pools and perpetual markets from emitted intents at first use, while config fields remain optional prewarm hints; Intent.sequence executes dependent actions in order. (#3837)
• Authenticated exact-pool history and reproducible replay — exact-pool OHLCV is loaded on demand, and pools missing from static registries are resolved from historical state, pinned in schema-v3 manifests, and reused by --from-result. (#3896, #3942)
• Honest hosted outcomes with live progress — every PnL run carries a typed validity verdict, while loading and simulation report separate counts, elapsed time, and bounded progress updates. (#3843, #3935, #3936)
• Lending capacity preflight — new ax lending-capacity verifies Morpho Blue identity, borrow liquidity, and both exact-address swap-route legs before deployment. (#3867)
• Expanded connector coverage — Uniswap V4 now supports Robinhood Chain, and Aerodrome Slipstream selects the correct periphery contracts across every reviewed factory generation. (#3922, #3841)
• Authenticated quote-first slippage — connector-owned executable quotes replace tick scanning and unsafe references fail closed. (#3923)
• Almanak Code v1.0.65 — the bundled agent includes backtest-progress support and the latest reliability improvements. (#3898, #3935, #3940, #3941)

Fixes

• Backtest boundaries stay strict and observable — explicit price cadence, exact venue identity, provider ownership, terminal sequences, reference-price refusal, and every missing-data path now produce consistent typed results and ledgers. (#3851, #3879, #3885, #3887)
• Accounting evidence preserves reality — unavailable values remain unmeasured instead of zero, and reverted transactions retain receipt, gas, and identity evidence. (#3764, #3897)
• V3-family LP closes enforce protective minimums — per-token withdrawal floors are derived from live position and pool state across Uniswap V3, SushiSwap V3, PancakeSwap V3, and Agni. (#3930)
• Safer lending and state identity — Aave E-mode liquidation uses the effective threshold, required market IDs are enforced at strategy boot, and token cache updates retain canonical address rows. (#3886, #3864, #3865)
• Runtime and teardown hardening — malformed boundary values fail predictably, residual uncertainty stays visible, whitespace-only manager aliases lose precedence, and unknown approval actions are rejected. (#3862, #3863, #3909, #3929)
• Reliable Robinhood and Stargate execution — Robinhood catalogue demos now launch on managed Anvil, and Stargate refreshes live messaging fees immediately before compilation. (#3933, #3936)