max / makenotwork

• Audit Run 16: type safety, performance, dedup, testing (A- -> A)

  Max J. 2026-04-29 15:30 cfe8c31

• Fix sandbox IP cap bypass, race condition, S3 orphans, dead constants

  Max J. 2026-04-29 02:58 2e6c345

• Sandbox fuzz fixes: add missing guards, block public content leaks

  Max J. 2026-04-29 02:39 601ce00

• Update landing page: move CTAs to hero, clean up copy

  Max J. 2026-04-29 02:17 55fc8eb

• Bump version to 0.4.4

  Max J. 2026-04-27 21:06 5d45369

• Creator trust audit round 4, Everything tier rename, privacy job tracking

  Max J. 2026-04-27 21:02 b058fd5

• Add guest checkout, embeddable widgets, and trust audit fixes

  Max J. 2026-04-27 03:17 bd0e8e7

• Update MT todo: mark MaybeUser session warning as fixed

  Max J. 2026-04-26 23:43 528e7a7

• Log warning on session display_name read errors in MaybeUser extractor

  Max J. 2026-04-26 23:43 29e9814

• Fix integration tests for CSRF rotation, hashed API keys, and schema changes

  Max J. 2026-04-26 23:04 9ee585b

• Fix invalid SQL in custom domain creation: FOR UPDATE with COUNT(*)

  Max J. 2026-04-26 23:04 bd5a7ab

• Update MT todo: all fuzz findings resolved

  Max J. 2026-04-26 20:20 dec98f8

• Add per-IP rate limiting to search endpoint (burst 5, 1/sec)

  Max J. 2026-04-26 20:20 bbfc2eb

• Fix auto_hide audit trail: set removed_by to NULL for system-initiated removals

  Max J. 2026-04-26 20:20 321c73e

• Update MT todo: mark fuzz findings as fixed, update test count to 232

  Max J. 2026-04-26 20:06 1be99fd

• Add HMAC auth to internal thread stats endpoint

  Max J. 2026-04-26 20:06 7842fb3

• Reject invalid ban/mute duration instead of silently defaulting to permanent

  Max J. 2026-04-26 20:06 141b0f6

• Fix search query panic on multi-byte UTF-8 truncation

  Max J. 2026-04-26 20:06 c3956c1

• Fix SSRF bypass in link preview via IP parsing and DNS resolution

  Max J. 2026-04-26 20:06 8ae68e6

• Fix cross-community IDOR in flag, category, and tag handlers

  Max J. 2026-04-26 20:06 ab894e4

• Fix compiler warnings: remove unused import, prefix unused var, allow dead_code on pre-built DB functions

  Max J. 2026-04-26 20:05 abeb793

• Update docs: sandbox guide, tips/bundles/splits, Stripe naming, fuzz findings

  Max J. 2026-04-26 19:46 80f4127

• Add scheduler jobs: sandbox cleanup, stale tx cleanup, IP scrubbing, termination

  Max J. 2026-04-26 19:45 be9c4b0

• Fix promo code race and duplicate checkout: reserve at checkout, not webhook

  Max J. 2026-04-26 19:44 34f43e1

• Add sandbox mode: ephemeral creator accounts for dashboard exploration

  Max J. 2026-04-26 19:44 cb20647

• Add admin enforcement ladder: content removal and account termination

  Max J. 2026-04-26 19:43 c9720b2

• Security hardening: code fuzz round 3 fixes

  Max J. 2026-04-26 19:43 dc8dfe9

• Add DB layer support for sandbox, termination, content removal, and promo tracking

  Max J. 2026-04-26 19:41 e7052f4

• Add migrations 072-076: sandbox accounts, pending uniqueness, promo tracking, content removal, termination

  Max J. 2026-04-26 19:39 69240f6

• v0.4.2: Graceful migration failure handling

  Max J. 2026-04-26 03:03 d0d6fa7