Platform13 September 2026

80eight Platform — v2.6.0

Payment links on real rails, 88Pay Air as a first-class payment identity, and a referral engine.

Personal payment links settle on card, offline EFT and instant PayShap , and a payment made without an 80eight account is tracked behind a short-lived signed token.
Settlement reaches the payee. One settlement path per rail, fee policy applied on provider-settled links, refund cover, a distinct chargeback receivable, and grace for a charge still open when a link expires.
A crypto link claims its own address , so two open links never collide, and a link with nowhere to pay into is refused rather than accepted.
Travel Rule screening on inbound crypto settlements across personal, payment-link and card-present flows.

An Air payment is a first-class payment rail on the transaction, with per-device sessions, tips and round-ups folded into one total, receipts, and an activity feed.
The business half — charge mode where the till sets the amount, staff-device attribution, business-run rooms, invoices settled by Air, and expense capture.

A campaign engine on its own code namespace, kept separate from personal codes, with milestone progress, an opt-in leaderboard, nudges, share-channel attribution and a partner view.
A reward accrues only once the invited person completes verification , and pays out to nobody before that.
Farming detection runs on the platform integrity pipeline.

Placing a limit order is idempotent , so a retried request can only ever place one order.
Saved beneficiary edits are atomic , so two concurrent changes cannot lose one another.
Corrected network configuration for USDT on Solana , so the asset always resolves on that chain.
Steadier capacity under momentary latency — a single missed internal health check no longer removes a healthy instance from the pool.
A payment provider cannot advertise a capability it does not have , and enabling an offering verifies that capability first.
A cancelled or expired payment link shows its real status before anyone tries to pay it.

Duplicate-identity detection. A second account presented with the same government-issued ID is flagged for review.
Removing a device ends its session immediately , without relying on the identity provider to do it.
Device integrity is recorded and risk-scored , report-only for now.
Profile images are no longer derivable from one another.
Refund paths enforce unspent-load reversal.

Compliance-scoped writes require a specific capability , not a general administrator role.
Support ticket reads mask customer identity fields unless the caller holds the relevant capability or a live, consented grant.
The /chat endpoint is marked deprecated in the v2 specification.

Foundations for better-timed, more relevant notifications — a versioned journey engine with a simulate mode that schedules everything and sends nothing, audience rules with a preview, delivery tracking, per-locale copy, holdout measurement, and second-operator approval before anything activates. It ships switched off and arrives gradually.