{"id":"ship:1190fade-4dd7-43c0-99fa-5b635a31b882","withdrawn":false,"project":{"slug":"almanak-co-sdk","name":"almanak-co sdk","url":"https://heyresearch.xyz/project/almanak-co-sdk"},"domain":"build","claimType":"GITHUB_RELEASE","summary":"v2.29.1","sourceType":"github","sourceUrl":"https://github.com/almanak-co/sdk/releases/tag/v2.29.1","publishedAt":"2026-09-24T15:02:51.000Z","detectedAt":"2026-09-24T22:19:48.762Z","precision":"EXACT","verification":"PUBLICLY_VERIFIED","countsAsBuilding":true,"countedAs":"counted","countedAsSentence":"Yes. It is one of the records HEY’s activity status is built from.","recordedAt":"2026-09-24T22:19:48.762Z","metadata":{"summary":"### Security - **Platform backtest callbacks use a run-scoped token instead of the shared platform secret.** The runner and its progress reporter send `x-almanak-backtest-token` from `PLATFORM_CALLBACK_TOKEN`, which the platform mints per execution; the shared `PLATFORM_CALLBACK_SECRET` is used only when no token is set. (#4049) - **Backtest runner jobs published from this release no longer carry the platform secret.** The publish template stops mounting `PLATFORM_SECRET_ACCESS_KEY` into the runner container, which executes user strategy code. Sweep runner jobs keep it until the sweep runner g","releaseVersion":"v2.29.1","prerelease":false},"sources":[{"evidenceRowId":"0157224d-d3b4-4b6b-aafb-b1b8574032b6","sourceType":"GITHUB_REPO","sourceUrl":"https://github.com/almanak-co/sdk/releases/tag/v2.29.1","observedAt":"2026-09-24T22:19:48.762Z","metadata":{"tag":"v2.29.1","prerelease":false}}],"disclaimer":"Public, source-backed activity HEY recorded. Still Building means verified activity through a tracked market drawdown — it is not a prediction, not a ranking by price, and not investment advice. Few projects meet Still Building or Under the Radar at any time; both are strict by design, and list responses carry the counts."}