-
GO-30-CSP W2+W3: migrate all inline on* handlers to delegated dispatch
-
Frontend cold spots R1: isAllDay flag, time-summary rollup to Rust, extract injected CSS
-
Fix cold-spot correctness: parser UTF-8 panic, desktop blob_gc, backup collision, FE bugs, XSS sinks
-
Frontend XSS: seal the unsafe attribute escaper (CHRONIC-XSS)
-
theme: GoingsOn styles purely intent-specified (no brand aliases)
-
Daily notes, implicit contacts, UX polish, calendar views, search