What shipped, dated and linked to a pull request or transaction.
Allowance endpoint allowlistedaudit.liquidlogicx.com/api/allowance added to the published treasurer allowlist so pre-flight checks can be paid on Base.
Launch genesis + payment hash gateexecutePayment refuses type=payment without a real txHash (writes payment_failed instead). Ledger truncated to day-one genesis (wallet + BaseScan top-up). Public /ledger fetches live with no-store and renders hold/freeze types distinctly.
Hold threshold + approve/deny/expirePayments at/above HOLD_ABOVE_USDC write held and wait for phone-reachable Bearer approve/deny, or mandatory TTL auto-deny (expired). Treasurer is a public Render web service for operator HTTPS.
Operator freeze / unfreezeTreasurer POST /api/freeze and /api/unfreeze (Bearer LLX_OPERATOR_TOKEN) halt and resume all outbound payments. Freeze state persists in the ledger across restarts; pay() fails closed while frozen.
Ledger event type field (payment default)Ledger writes always include an explicit type, defaulting to payment. Reserved held/denied/expired/frozen/unfrozen for takeover; audit spend still counts only payment (or missing type).
Allowance pre-flight endpointAgents can pay $0.001 USDC to ask whether the treasurer wallet may pay an x402 URL and how much remains under the UTC daily cap — before spending $0.05 on a full audit.
Ledger union sync + audit settlementsTreasurer GitHub sync now unions events instead of replacing the file, restoring wiped Task A spend and recording live $0.05 audit settlements.