Change Log

v1.1.0 JULY 2026

Traffic Protection & Anti-Fraud

Signed click tokens. Tracking URLs are no longer scrapeable — every click carries a short-lived HMAC token, so bots can’t forge or replay them.
Trusted-gesture verification. Clicks record only from a real user action, not scripted .click() calls.
Single-use. One click per served ad — a harvested link can’t be fired repeatedly.
Result: clicks can no longer exceed real ad loads — the inflated-click pattern is structurally eliminated.

Viewability. An impression counts as viewed only when the ad was actually ≥50% on-screen for ≥1 second (IAB-style).
Signal scoring. Every click is scored on real human signals and labelled valid / suspect / legacy — nothing is ever hard-dropped, so legitimate clicks are never lost.
Flagged-traffic view. See exactly what’s inflating a campaign — and why — without touching code.
Trusted-IP allowlist, spoofed/ancient user-agent blocking, datacenter & bot-network filtering, and a live blocked-traffic panel with one-click subnet blocking.

Platform Updater. Versioned .zip updates applied from the admin UI, with file backups and one-click rollback.
Timezone control. Set the display timezone in Settings; timestamps are now consistent and DST-aware.
Permissions. Per-user permission overrides are now enforced and take effect on the next page load.
Fixes. Editing a user no longer deletes it; Admin/Editor accounts can see all content again.

v1.0.1 JULY 2026

First tagged production baseline on the FERAL platform build.
Core ad serving, zone/campaign/banner management, statistics, guided onboarding, and initial bot filtering.