-
Fix invalid SQL in custom domain creation: FOR UPDATE with COUNT(*)
-
Update MT todo: all fuzz findings resolved
-
Add per-IP rate limiting to search endpoint (burst 5, 1/sec)
-
Fix auto_hide audit trail: set removed_by to NULL for system-initiated removals
-
Update MT todo: mark fuzz findings as fixed, update test count to 232
-
Add HMAC auth to internal thread stats endpoint
-
Reject invalid ban/mute duration instead of silently defaulting to permanent
-
Fix search query panic on multi-byte UTF-8 truncation
-
Fix SSRF bypass in link preview via IP parsing and DNS resolution
-
Fix cross-community IDOR in flag, category, and tag handlers
-
Fix compiler warnings: remove unused import, prefix unused var, allow dead_code on pre-built DB functions
-
Update docs: sandbox guide, tips/bundles/splits, Stripe naming, fuzz findings
-
Add scheduler jobs: sandbox cleanup, stale tx cleanup, IP scrubbing, termination
-
Fix promo code race and duplicate checkout: reserve at checkout, not webhook
-
Add sandbox mode: ephemeral creator accounts for dashboard exploration
-
Add admin enforcement ladder: content removal and account termination
-
Security hardening: code fuzz round 3 fixes
-
Add DB layer support for sandbox, termination, content removal, and promo tracking
-
Add migrations 072-076: sandbox accounts, pending uniqueness, promo tracking, content removal, termination
-
v0.4.2: Graceful migration failure handling
-
Renumber duplicate migration 067 to 071
-
v0.4.1: Creator trust audit, security hardening, account lifecycle
-
Creator trust audit: AI tiers, export fixes, doc corrections, availability commitment
-
WAM v0.2.0: channels, node identity, peer sync
-
Fix CI scripts for astra local WAM and auto-revert on failure
-
CI pipeline: WAM-triggered CI with auto-revert on failure
-
Add CI/CD pipeline scripts and roadmap
-
Bump server to v0.4.0
-
Add WAM (Whack-a-Mole) ticket manager with 25 proactive ticket sources
-
Fix 14 flaws from adversarial code fuzz, add pending refund queue