Dear Pickful community,

Here's what's new:

🔒 Security Hardening

• CSP enabled site-wide, signed URLs for S3 assets
• Pundit authorization enforced on all controllers with full policy coverage
• Admin consolidation with tightened route constraints

♿ Accessibility (WCAG)

• 15+ icon-only buttons now have aria-label for screen readers
• 4 modals annotated with role="dialog" + aria-modal
• Form inputs and avatar images given proper labels and alt text
• Text contrast improved from /60 to /70 across all views

🌍 Internationalization

• All 11 admin views and 3 admin controllers fully localized
• 130+ new translation keys across en / zh-CN / zh-TW
• zh-TW completed for earnings, refunds, settings, and admin sections
• Notifications page fully internationalized

⚡ Architecture & Performance

• User god object refactored into 6 domain-specific concerns
• Kaminari replaced with Pagy; pagination component redesigned
• Service layer extracted, composite database indexes added
• Background job retry mechanisms in place

✨ Feature Improvements

• Authors notified when their articles are purchased
• Long posts auto-collapse in feed
• Notification icons aligned, mark-as-read UX improved
• Drafts index fixed for overflow and empty content

🧪 Test Coverage

• Full request specs for all controllers
• New specs for services, jobs, policies, and helpers
• All 978 tests passing

This update covers a wide range of improvements. If you encounter any issues, please let us know at /t-t5a — we appreciate your valuable feedback.

The #Pickful Team

February 13, 2026