What’s new on BlitzPulse

A running log of what’s shipped — platform, security, compliance, and trader-facing features.

1. 2026-05-17

   Compliance hardening and dashboard polish

   • Investment Committee, Tax, and Mark-to-Market workflows are now admin-gated for regulated-shape review.
   • Dashboard widget RBAC seeding so smoke users no longer hit 403s on shared surfaces.
   • Schwab refresh-token lifecycle hardening with token-issued timestamps, revoke-on-disconnect, and 429 backoff.

2. 2026-05-11

   SOC 2 Phase 1 security baseline

   • RS256-signed JWT access tokens with rotating refresh sessions.
   • Redis AUTH, Postgres TLS, and per-request nonce CSP across all surfaces.
   • Passkey and MFA enrollment flows fully wired through the production sign-in surface.

3. 2026-05-04

   Runtime config and integrations

   • Admin Integrations panel for runtime configuration of Finnhub, OpenAI, broker credentials, and feature flags.
   • Fernet-encrypted runtime config with audit log and operator-only edit access.
   • Public legal documents portal for privacy, terms, sub-processors, risk, refund, and cookies.

4. 2026-04-23

   Alerts Phase A morning email briefing

   • Daily pre-market briefing email with watchlist context, catalysts, and portfolio summary.
   • Operator runtime controls for cadence, recipients, and content scope.