Public ledger of every directory change — grade bumps, KYC re-tests, sponsorship activations, incident updates. We log it so visitors can verify our claim that the editorial firewall holds.
The list is the product; this is the receipt of how it changes.
Logo replaced per operator request: switched from white-background JPG to transparent-background 512x512 PNG. Fetched from onion/assets/swap/img/logo/512.png via SOCKS5 (476 KB, 8-bit RGBA). File moved from peers/ollieswap.jpg to peers/ollieswap.png; links.logo URL updated. Deploy pending.
Tracking-codes clarification email sent to <contact-on-file>. Body: sponsor slots stay bare per firewall; affiliate hop offered on a same-host-tracked clearnet URL so /go carries the ?s param to both surfaces (Tor + clearnet) without losing traffic; ollie.la needs to accept the ?s param before wiring.
xmr.club
{
"subject": "Re: Tracking codes — sponsor slots stay bare, affiliate hop needs a clearnet-supporting URL"
}Payment-received + slots-active confirmation email sent to <contact-on-file>. Body: 2.5 XMR received with tx hash, Headline active now, Front-page pending 2026-08-03, both pitch copies inline for their review with adjustment invitation, grade-firewall reminder.
{
"subject": "Payment confirmed — Headline live, Front-page queued for 2026-08-03; pitch copy inside"
}Both sponsor tiers paid + activated. Total: 2.5 XMR. TX hash: 5ef8b024d2b3cc126362dc1b95d22c2881bd154afb074258c3f20b9cdb6ed18b. Headline row: starts_at=2026-07-23T13:47:46.424Z, ends_at=2026-08-22T13:47:46.424Z, status=active — visible immediately. Front-page row: starts_at=2026-08-03T19:15:48.000Z (matches El Capos ends_at), ends_at=2026-09-02T19:15:48.000Z, status=pending — activation sweep will flip to active on 2026-08-03. Waitlist rows #9 + #10 flipped to converted. Operator asked us to write pitch copy ourselves; both pitches drafted based on the review-body strong signals (Tor-only design + own-liquidity + no-accounts + PGP identity).
{
"subject": "Re: Audit-page email leak — scrubbed + structural fix queued"
}Redacted operator email from 7 prior audit_log rows (ids 2059-2072) after operator flagged that /audit?id=ollieswap was surfacing the address publicly. Two leak vectors fixed: (1) /api/admin/email/send auto-writes entity_id=<recipient> — updated to entity_id=ollieswap for the 3 email-pipe rows; (2) my own audit-log rows for those sends spelled the address into the details field — redacted to <contact-on-file>. Address remains reachable via submission #45 + sponsor_waitlist #9+#10 rows (admin-only). Same shape of scrub as the 2026-07-22 pass on the provider row; this pass covers the audit_log surface which I missed then.
{
"subject": "Re: Your Ollie Swap listing is live on xmr.club — sponsor bundle confirmed + pitch copy request"
}Folded operator reply into listing: (1) ollie.la clearnet entry page added to links.web + tagline + review body; (2) small-bench wording rewritten as focused-five-coin + on-server-ownership signal; (3) Loyalty Code section added explaining UUID-per-swap. All 4 languages updated. Grade unchanged at C.
{
"also_listed_at": {
"monerica": true
}
}Removed <contact-on-file> from all public-facing surfaces: deleted data.links.contact_email field + rewrote the contact-email sentence in en/zh/es/ru review bodies to explain that the operator has not published the address on their own site so we do not surface it either. The address remains accessible to the curator via the submission (id=45) row, the sponsor_waitlist (#9 and #10) rows, and this audit_log record — all admin-only surfaces.
{
"subject": "Ollie Swap sponsor tiers — headline + front-page availability"
}Manual acceptance email sent to <contact-on-file> via /api/admin/email/send. Auto-trigger was bypassed because submission #45 was closed via raw SQL update rather than PATCH /submissions/:id. Body includes: grade context (C not a warning), tenure caveats, PGP hygiene called out, path to B, 2 one-line questions (Loyalty Code + anything else), badge embed snippet, sponsor waitlist confirmation with tier availability.
{
"subject": "Your Ollie Swap listing is live on xmr.club"
}Refined canary + PGP paths in en/zh/es/ru: /pgp (page for keys) vs /en/canary (warrant canary) split into two distinct references. Locale-prefix /en/pgp for keys page. Earlier guess conflated the two.
PGP identity section added to en/zh/es/ru with all 3 fingerprints. Keys mirrored at xmr.club/pgp/ollieswap/{main,fallback,server}.asc for clearnet-side verification. Editorial framing: unusually good key hygiene for a one-month-old solo project.Flipped draft → active at Grade C. Community Presence section added to EN body with three operator-provided onion forum URLs (Dread + Tenebris + Pitch). i18n zh/es/ru folded from enhanced EN body. Grade C reflects methodology default for new no-KYC exchange; not shame-list. Sponsor waitlist #9 (Headline) + #10 (Front-page) now processable — listing is active, sponsor eligibility per Shroud precedent.
Curator logo override set to https://xmr.club/peers/ollieswap.jpg (128x128 JPEG, 3.2 KB spider persona provided by operator).
Draft insert at Grade C, exchanges/Instant Swaps. Tor-only service — no clearnet URL exists. links.tor set, links.web deliberately null. /go/[slug].ts enhancement queued to render Tor-Browser landing for clearnet visitors. Sole-operator project (2026-06-20 founding), 5-coin privacy-adjacent bench, published reserves.