-
server: remove the cost-allocation breakdown from /pricing
-
server: restructure the frontend into a typed core lib + custom-element islands
-
server: compute the pricing comparison from assumptions.toml
-
server: fix quarantine purge project-cover gap + cover db/scanning (A5, B-Sto1)
-
server: import-job heartbeat + stuck-job reaper, typed status (A5)
-
server: split public image content into a separate CDN bucket (S1)
-
synckit: cap blob-upload input size (risk Phase 4)
-
synckit: cap Argon2 memory, scrub key windows, guard change-password (risk Phase 3)
-
synckit: cap response bodies, harden TLS/loopback + transport (risk Phase 2)
-
synckit: converge conflict tie-break, type the HLC node (risk Phase 1)
-
server: bound the shutdown request drain; give hard-exit real margin
-
mt: spawn the read-position bump off the thread GET
-
pom: batch migrations via raw_sql; make two-statement writes atomic
-
pom: honor an explicit scheme in the peer address
-
pom: funnel alert dispatch through fire_failure/fire_recovery
-
pom: move drift/staleness analysis out of the HTTP probe
-
pom: config hardening — env precedence, route validation, secret redaction
-
pom: debounce status transitions (N-of-M) and seed state on restart
-
pom: give the ssh test run a total timeout, not just ConnectTimeout
-
pom: set MissedTickBehavior::Delay on the remaining probe loops
-
pom: persist-and-retry undelivered alerts; fix recovery cooldowns
-
pom: treat a stale health snapshot as unreachable in the offline net
-
pom: cap peer response bodies and re-project mesh into a fixed schema
-
pom: scrub terminal control chars from remote strings; don't panic CORS task
-
pom: stop leaking the API token to the dashboard; rate-limit per IP
-
pom: deliver failure alerts by email when wam_url is unset
-
server: purge expired items and decrement storage in one tx
-
server: run scheduler payments/cleanup I/O off the tick lock
-
gitignore: keep risk-lens fuzz reports out of the public repo
-
mt: make the guest-role migration self-healing