Week of July 19–25, 2026

This week at a glance

115 user-facing PRs merged across Layer, Overwatch, Locus, RouteShift, Codex, and Invest.

New features

• Layer: LiteLLM pricing, CI cost controls, landing viz (LAY-313/712/718) (#211)
• Layer: FOCUS ledger, AI passports, SCuBA import, privacy pilot (LAY-695 LAY-694) (#206)
• Layer: agent registry, remediation, calibration & freshness (LAY-698) (#204)
• Layer: link the shared docs site from the Layer footer (LAY-707) (#205)
• Overwatch: integrate and harden Launch 4.0 on current main (#292)
• Overwatch: ingest Sentinel-2 optical chokepoint scene catalog (AXO-464) (#198)
• Overwatch: identity-consistency graph risk feature (#186)
• Overwatch: AIS-behavioral ML load-state predictor as hydrostatics cross-check (AXO-469) (#195)
• Overwatch: AIS communication-fault prefilter (#187)
• Overwatch: @axiom/ftm package + ftm JSONB on 3 producers (AXL-229) (#20)
• Overwatch: azimuth-shift (Doppler) compensation for SAR-AIS matching (AXO-463) (#199)
• Locus: make score explanations truthful and usable (#299)
• Locus: add calibrated Valhalla drive accessibility (#196)
• RouteShift: preserve native provider tool turns (RSH-68) (#125)
• RouteShift: add Gemini thinking levels and reasoning telemetry (#148)
• RouteShift: enforce auto-topup hard ceilings (RSH-92) (#140)
• RouteShift: link docs.axiomancer.io from landing nav and footer (#150)
• Invest: reasoning-trace observability — capture, persist, score extended thinking (TRD-863 WS5) (#568)
• Invest: trade-quality dial + fail-closed daily entry budget + capital veto (TRD-863 WS2) (#567)
• Invest: extended reasoning walls + timeout-chain alignment + no deep→fast fallback (#566)
• Invest: submit-time staleness re-check for slow decisions (#565)
• Invest: Aliyun rung-3 GLM backup fallback + qwen3.8-max-preview eval aliases (#543)

Updates

• Layer: wrap helpers + consolidate permissive policies on new governance tables (LAY-709) (#209)
• Layer: bind subject_asset_id to caller org in ingest_security_event (LAY-710) (#208)
• Overwatch: AXO-465: Cost-routing cascade for LLM extraction pipeline (#197)
• Overwatch: STS/loitering detector: enforce exact GFW encounter thresholds (AXO-454) (#193)
• Overwatch: refresh axiomoverwatch.io metrics to live 2026-07-19 inventory (#294)
• Overwatch: Codex Live: integrate governed ingestion and health observability (#296)
• Overwatch: add Axiom Docs link to Overwatch Resources column (#295)
• Locus: AXL-157: add canonical renter filters to Discover (#303)
• Locus: AXL-391: formalize range pagination on scalar-jsonb RPCs (#290)
• Locus: AXL-440: make metro overview movement truthful (#301)
• Locus: link to shared docs site from Product column (#305)
• RouteShift: Add first-run quick start to Overview (#133)
• RouteShift: RSH-126: bounded service-tier intent (#149)
• RouteShift: Polish dashboard and landing interactions (#134)
• RouteShift: RSH-128: fail-closed data residency routing (#147)
• RouteShift: RSH-129: isolate untrusted web search results (#143)
• Codex: P2 remediation from 3-lane adversarial review (source types, family consistency, baseline scores) (#101)
• Codex: envelope completeness gate (AXC-333) + benchmark derivative-spec (AXC-314) (#100)
• Invest: TRD-805 bound FanOutPanel shadow backlog (#560)
• Invest: TRD-816 harden chaos isolation and real-native accounting (#557)
• Invest: TRD-793 make terminal retries fair and shutdown-safe (#551)
• Invest: TRD-807 harden operator acceptance contracts (#550)
• Invest: TRD-819 harden dormant Azure and Haiku paths (#549)
• Invest: TRD-809 harden shared-signal recovery and writer lifecycle (#553)
• Invest: TRD-810 harden research evidence and cache semantics (#552)
• Invest: Trader Live wave 4: harden replay, risk, monitoring, and SSE (#541)
• Invest: Trader Live: close six correctness and durability gaps (#539)
• Invest: TRD-461: stamp decision policy epochs (#527)
• Invest: TRD-701: make restore drills fail closed (#513)
• Invest: TRD-466: add shadow experiment preregistration harness (#526)
• Invest: TRD-463: add shadow calibration receipt (#525)
• Invest: TRD-650: fully retire screener publisher (#524)
• Invest: TRD-184: persist stale provider rejections (#503)
• Invest: TRD-684: breadcrumb expired OCP reservation guards (#502)
• Invest: TRD-517: record mixed CF fallback qualification proof (#479)
• Invest: TRD-700: define live execution canary policy (#477)

Fixes

• Layer: gate + test wiki-mirror Worker, fix Spend silent failures (LAY-716 LAY-719 LAY-720) (#216)
• Layer: land LAY-643/645/660 extension telemetry + offboarding hardening (revives #195) (#215)
• Layer: address review P2s from PR #211 gauntlet (LAY-313/630/712/718) (#212)
• Layer: reconcile devices.lifecycle_state for deployed devices (LAY-711) (#210)
• Layer: repair prod is_org_admin() drift so admin-write RLS grants (LAY-708) (#207)
• Overwatch: address adversarial review findings — URL sanitizer, clock-skew guard, reclaim reserve (#304)
• Overwatch: split claim_ingestion_deliveries OR into two index-efficient phases (#303)
• Overwatch: redact Equasis session cookie values from worker logs (#302)
• Overwatch: stop two Sentry noise sources on the live map (#299)
• Overwatch: AXO-167 attribution on vessel-flag temporal_edges triggers (#203)
• Overwatch — historical code report; SAR detection is not launch-supported: suppress small (<60m) SAR contacts from dark-vessel scoring & writes (#188)
• Overwatch: Loop-15 quick wins — dbt close-gate evidence + temporal-decay contract (AXO-428, AXO-429) (#161)
• Overwatch: suppress recharts/abort/fallback Sentry noise (#293)
• Overwatch: correct ingested_at semantics in HMDA envelope backfill (#204)
• Overwatch: use admin client for overview AIS count (#297)
• Overwatch: stagger equasis-extraction-canary cron off minute 17 (#298)
• Locus: repair AXL-403 Deck overlay constructor crash (#297)
• Locus: harden cell_score_deltas matview ACL — revoke write bits, grant SELECT (#309)
• Locus: make profile comparison reliable and interactive (#298)
• Locus: restore authenticated cell search (#304)
• Locus: resolve four Locus findings (#307)
• RouteShift: normalize PDF bytes for Node 26 (RSH-125) (#126)
• RouteShift: remove redundant model quick picks (#132)
• Invest: boot cache-truth convergence guard — verified reconciliation before cache authority; bounded halt reasons (#569)
• Invest: signal-admission drop receipts + status-file age gate + confidence-coercion warning (#564)
• Invest: witness-qualified equity late re-anchor; decouple opening witness from book truth (#563)
• Invest: close non-jury late spend windows (TRD-853) (#558)
• Invest: Phase-0 ruin-fence backstop — automated exits can no longer strand naked shorts (#556)
• Invest: derive escalation tool budget; page on repeated confirm_all starvation (#555)
• Invest: kimi-review slice 1 — startup fill re-sync, feed-router age-out, canonical venue netting (#536)
• Invest: concentration-gate proposal seam must not use raw notional as candidate risk (#554)
• Invest: close late jury spend settlement window (TRD-831) (#548)
• Invest: close Trader Live acceptance gaps (TRD-837) (#546)
• Invest: dashboard wiring — real P&L, honest strategy stats, correct cards, collapsible chart (#545)
• Invest: sampling-aware outcome-enricher coverage rule (#544)
• Invest: remove backticks from unquoted-heredoc SQL comments in session monitor (#542)
• Invest: expiry auto-close without a mark, equity notional, artifact provenance (#537)
• Invest: stop fabricating direction in darkpool + options-flow signals (#535)
• Invest: deploy timeout budget, drift-check creds fail loud, placebo tests out (#534)
• Invest: IB snapshotters recover the PG session after a poll failure (#533)
• Invest: keep console SSE push alive across stream recycle + echarts XSS bump (#532)
• Invest: kimi-review batch 1 — fail-safe env/int parsing + visible lifecycle reconcile failures (#529)
• Invest: switch canary to OpenAI gpt-5.4-mini while NeuralWatt billing-limited (#540)
• Invest: venue-mirror collapse in close guard, position-truth error detail, triangle unit decoupling (#528)
• Invest: close live preflight false-green paths (#519)
• Invest: correct operator health documentation (#521)
• Invest: require confirmation for decide-now proposals (#523)
• Invest: cache loop-breaker control-plane knob (#522)
• Invest: reserve executable opening debit before approval (#515)
• Invest: harden Graphiti client auth and repair wiki drift (#511)
• Invest: harden launchd auth and repo-own order-flow watchdog (#510)
• Invest: accept as_of kwarg in replay retriever stub (#506)
• Invest: exclude TRD-203 example fixtures by default (#504)
• Invest: reject crossed collar equity quotes [TRD-532] (#501)
• Invest: truthfully filter scanner opening trades (#482)
• Invest: harden post-open readiness paging [TRD-597] (#470)
• Invest: canonicalize IB option venue identity (#451)