max / makenotwork

• mt+server: close internal-API replay chain (ultra-fuzz C2+E1)

  Max Johnson 2026-06-19 02:29 21d5371

• sando+server: boot_smoke probes /health on a known port instead of liveness-only

  Max Johnson 2026-06-19 01:27 a0a22c5

• sando: refuse to build on a non-build host (ultra-fuzz structural, never build on prod)

  Max Johnson 2026-06-19 01:21 c58cbb7

• bento: collapse a nested if in runner (clippy, rust 1.95)

  Max Johnson 2026-06-19 01:10 b058fc7

• bento: seal publish behind an unforgeable PublishAuthority (ultra-fuzz structural)

  Max Johnson 2026-06-19 01:09 15f1353

• sando: clear clippy lints from toolchain drift (rust 1.95)

  Max Johnson 2026-06-19 01:05 294d309

• sando: fail closed on a serving tier with no promotion gate (ultra-fuzz structural CF1)

  Max Johnson 2026-06-19 01:03 c106137

• server: close license-activation revoke TOCTOU; stop pending-refund dup re-queue

  Max Johnson 2026-06-18 22:43 f42d2d0

• server: fix join-wizard HTMX validation input loss; clamp discover paging

  Max Johnson 2026-06-18 22:35 4674725

• server: bound per-tick scheduler sweeps; anchor request-timeout exemptions

  Max Johnson 2026-06-18 22:00 349dc7f

• server: govern OAuth read routes; harden passkey + password-verify paths

  Max Johnson 2026-06-18 21:44 75b315b

• server: make gallery confirm idempotent (STOR-S1)

  Max Johnson 2026-06-18 21:31 73fc8c6

• mt: harden the image upload pipeline (F2, F5)

  Max Johnson 2026-06-18 20:09 8828d87

• mt: restore destructive-action confirmations (F1)

  Max Johnson 2026-06-18 20:09 a19e4df

• mt: paginate and flatten list_tracked_threads (F4)

  Max Johnson 2026-06-18 20:09 77e8471

• mt: bound ?sort=replies with a trigger-maintained post_count (F3)

  Max Johnson 2026-06-18 20:01 f8cd220

• Drop create_item redundant slug pre-check loop

  Max Johnson 2026-06-18 02:27 1fb0a75

• Sweep Run #22 minors: media presign tier cap, bounded scheduler spawns, session cap

  Max Johnson 2026-06-18 02:20 5342e16

• Fix UX-1: move free-text out of inline onclick JS-string context

  Max Johnson 2026-06-18 02:07 0a50783

• Perf PERF-2/3: collapse item-page viewer flags + batch code-tab collaborators

  Max Johnson 2026-06-18 01:39 bb78004

• Fix PERF-1: bound content-export memory for legacy NULL-size rows

  Max Johnson 2026-06-18 01:12 998f99a

• Fix SEC-S2: harden YARA corpus floor + expand conservative ruleset

  Max Johnson 2026-06-18 00:58 b19a53f

• Fix PAY-S1: release a pending-refund claim when processing fails

  Max Johnson 2026-06-18 00:27 784e61b

• Retire audit docs from the repo (treat-as-public)

  Max Johnson 2026-06-18 00:06 3790a3f

• test-fuzz: cover all 8 storage confirm failure branches via DB fault injection

  Max Johnson 2026-06-17 23:58 cf99d66

• test-fuzz Phase 2: pin storage CAS guards + session/report negative paths

  Max Johnson 2026-06-17 22:43 752046e

• Fix clippy gate: prefer contains/as_ref, drop needless Ok(?)

  Max Johnson 2026-06-17 21:16 f8ea7a1

• Default items.scan_status to clean so fileless items are discoverable

  Max Johnson 2026-06-17 16:01 72ab17f

• Preserve input on non-HTMX join-wizard validation; add field id to ValidationError

  Max Johnson 2026-06-17 01:26 f4d83d8

• Add global request timeout; background the content export

  Max Johnson 2026-06-17 01:13 f4d08f0