July 2026 — Mainnet beta
- Base Pay deposits with a Telegram Mini App, including in-app-browser detection that routes users to an external browser for the payment flow
- Deposit confirmation persists across page refreshes
- Group-owner accept/decline gate for funded campaigns, with a 48-hour auto-accept
- Cut over to the guarded escrow contract (
0xf808…101E) with a first-depositor guard closing a refund-hijack vector - Payouts split into separate owner (90%) and fee (10%) legs, each tracked independently
- Advertiser budget refundable at any time
- Per-group rate limiting with an audit log for turned-away joins
- Fail-closed scoring: Kimi-outage retries with exponential backoff; on exhaustion the user is admitted with no payout and no billing
- Recovery sweeps that detect and recover verifications stranded mid-flow, with admin alerts for silent failures
- Wallet-signature-authenticated advertiser and group-owner dashboards
- Marketing site with clean URLs and a published documentation site
Canvas is in mainnet beta (whitelist phase). This changelog covers product milestones only; it is not an exhaustive commit history.