Ah, yes, r28372 would have done it -- logged into a char with max stats, and api.php shows level 255. Meanwhile r28391 is fighting with it every time charpane.php is loaded, which detects the level as 256, but the next load of api.php resets the level back to 255 again.