-
Audit Run 16: type safety, performance, dedup, testing (A- -> A)
-
Fix sandbox IP cap bypass, race condition, S3 orphans, dead constants
-
Sandbox fuzz fixes: add missing guards, block public content leaks
-
Update landing page: move CTAs to hero, clean up copy
-
Bump version to 0.4.4
-
Creator trust audit round 4, Everything tier rename, privacy job tracking
-
Add guest checkout, embeddable widgets, and trust audit fixes
-
Update MT todo: mark MaybeUser session warning as fixed
-
Log warning on session display_name read errors in MaybeUser extractor
-
Fix integration tests for CSRF rotation, hashed API keys, and schema changes
-
Fix invalid SQL in custom domain creation: FOR UPDATE with COUNT(*)
-
Update MT todo: all fuzz findings resolved
-
Add per-IP rate limiting to search endpoint (burst 5, 1/sec)
-
Fix auto_hide audit trail: set removed_by to NULL for system-initiated removals
-
Update MT todo: mark fuzz findings as fixed, update test count to 232
-
Add HMAC auth to internal thread stats endpoint
-
Reject invalid ban/mute duration instead of silently defaulting to permanent
-
Fix search query panic on multi-byte UTF-8 truncation
-
Fix SSRF bypass in link preview via IP parsing and DNS resolution
-
Fix cross-community IDOR in flag, category, and tag handlers
-
Fix compiler warnings: remove unused import, prefix unused var, allow dead_code on pre-built DB functions
-
Update docs: sandbox guide, tips/bundles/splits, Stripe naming, fuzz findings
-
Add scheduler jobs: sandbox cleanup, stale tx cleanup, IP scrubbing, termination
-
Fix promo code race and duplicate checkout: reserve at checkout, not webhook
-
Add sandbox mode: ephemeral creator accounts for dashboard exploration
-
Add admin enforcement ladder: content removal and account termination
-
Security hardening: code fuzz round 3 fixes
-
Add DB layer support for sandbox, termination, content removal, and promo tracking
-
Add migrations 072-076: sandbox accounts, pending uniqueness, promo tracking, content removal, termination
-
v0.4.2: Graceful migration failure handling