Before launch: legal pages reviewed; data vendor terms confirmed; as-of timestamps visible on quotes; RSS attribution links work; analytics consent wired; no write-to-disk admin routes exposed in production without auth hardening.
Content: academy articles reviewed for unsourced claims; disclaimers on every lesson; no guaranteed return language.
Engineering: production env vars set; build and verify-content pass in CI; monitoring for API failures with graceful fallbacks.
Educational only · not investment advice · Risk disclosures