-
server: add third-party credits page (/docs/about/credits)
-
server: close Ultra Fuzz Run #4 phases 1-5 + 41-test integration triage
-
server: bump to 0.8.8
-
server: document the buffered/streaming dual-path in the scan worker
-
server: scan-spool orphan reaper + systemd StateDirectory
-
server: route big-file scans through the streaming pipeline
-
server: parallel path-based entries on structural + signing layers
-
server: clamav INSTREAM streaming entry
-
server: parallel path-based entries on yara/zip/sniff layers
-
server: wire fs2 statvfs into scan spool free-space check
-
server: introduce scanning::spool module and spool constants
-
server: add download_stream to StorageBackend
-
s3-storage: add download_stream returning the SDK ByteStream
-
server: bound broadcast fan-out at 16 with 100ms cadence
-
server: hourly retention sweep on scan_jobs
-
server: drop scan permit across S3 download
-
server: clear five Phase 1 caps from Ultra Fuzz Run #4
-
server: replace global CSRF allowlist with per-route posture helpers
-
server: gate suspended users out of profile and synckit billing mutations
-
server: convert remaining identity-leak surfaces to MaybeUserVerified
-
server: audit MaybeUser sites; introduce MaybeUserVerified
-
shared/pom-contract: schema-drift guard for /api/health producers
-
pom: drop checks.git_storage assertion on the mnw health target
-
wam: Phase 3 — stats/export/prune commands + TUI inline edit
-
shared: theme-common delete-by-id + preview palette, updater progress + markdown hook
-
server: minor audit polish (5 fixes from Ultra Fuzz Run #1)
-
pom: wire scan_pipeline target on hetzner
-
pom: scan-pipeline check + alerting
-
server: add /admin/uploads/health.json for PoM scan-pipeline check
-
server: scan dashboard Phase 2b polish