Portfolio screening before promotion
The roadmap calls for a portfolio intelligence layer because users arrive with existing holdings, not a blank account. The public portfolio scanner already gives browser-only halal, review, unknown, and blocked classifications without sending raw holdings to HalalCrypto servers.
Permission safety before self-serve keys
The new permission validator turns the no-withdrawal promise into a visible checklist: read access, spot trading, withdrawal-disabled keys, no margin/futures/perpetual access, and no API secrets pasted into support channels.
Country checks stay gated
The roadmap says country expansion must be gated by legal review. This page keeps that distinction clear: screening and education can be public, while automated onboarding in sensitive jurisdictions remains a controlled support workflow.