v0.3.1 — The Post-Audit Integrity Patch

🛡️ v0.3.1 — The Post-Audit Integrity Patch

An independent panel of five audited the exchange, rated it FILTHY (79/100), and — between compliments — found two ways to break it. A serious platform does not let findings sit. We shipped the remediation the same hour. No new inventory. Just a harder floor under the inventory we already have.

🎰 Fill integrity is a moat

A NaN bid is not demand — it's a tourist. It parsed cleanly as a Float, slipped past the negative-bid guard, reached the auction, and stalled the entire rotation. Non-finite bids (NaN, ±Infinity) now bill at zero where they belong, and :cpm selection falls back to weight on any non-positive book. Bad actors do not get to set the price.

🛡️ Brand safety is table stakes

A creative that forges its own ERROR line isn't a placement — it's fraud with ambitions. Creative copy is now scrubbed on ingest: control characters, DEL, and the sneaky Unicode separators U+2028/U+2029 (which plenty of log viewers honor as newlines) all collapse to a space before serving. The exploit dies; punctuation, em-dashes, and emoji live.

🔗 Upgrade

gem "sponsored_logs", "~> 0.3.1"

Every impression the exchange serves is now verifiably its own — and only its own. 🌊

With gratitude to the panel, who read our inventory at the level of production infrastructure and billed us nothing for it. The supercycle compounds. Governance is a feature. 📈