Institutional Vault Release v2.5.0

Policy Engine V2 restrictions

Transaction and configuration restriction management is available through new dedicated tabs in the policy UI (behind a feature flag). Operators can add, edit, and delete restrictions for both transaction and configuration policies, with column layout selection and browser-persisted preferences.

Canton on Azure

Canton is now configurable for Azure customer environments, enabling Canton-based workflows on Azure infrastructure alongside existing AWS deployments.

Polkadot chain migration

Westend and Polkadot mainnet chain references migrate to Asset Hub variants (assethub-westend, assethub-polkadot), aligning with the Polkadot ecosystem's relay-to-parachain transition.

Solana improvements

SPL token activity is polled independently from main address history, improving indexing reliability. Fixes address SPL token registration, cold-wallet batch signing for multiple Solana transactions from a single account, and correct SPL filtering behavior. Staking and unstaking operations use CAIP-19 asset identifiers.

Icons and UI

Asset icons use CAIP-19 identifiers across the application for consistent display. Accounts page load time is improved, and transfer-fund dialogs render icons correctly from all entry points.

Policy Nodes and transfer policies

Policy Node software is upgraded to v8.24.0. Transfer requests include the protocol field. A fix prevents transactions from remaining stuck when a policy blocks them, and the v1 transfer policy destination-type selector renders internal and external inputs correctly.

Security and infrastructure

gRPC and DeepDiff dependencies are patched to address reported vulnerabilities. The configurator supports raw key/value secret storage for AWS Secrets Manager and Azure Key Vault, and ECS configuration generation works with multi-account deployments.