- Investment Committee, Tax, and Mark-to-Market workflows are now admin-gated for regulated-shape review.
- Dashboard widget RBAC seeding so smoke users no longer hit 403s on shared surfaces.
- Schwab refresh-token lifecycle hardening with token-issued timestamps, revoke-on-disconnect, and 429 backoff.