max / makenotwork

• server: route idempotency cache write through bounded pool (ultra-fuzz Run #1 Perf MODERATE)

  Max Johnson 2026-06-19 21:10 8669659

• server: dedup section slugs and hash-fallback non-Latin slugs (ultra-fuzz Run #1 UX)

  Max Johnson 2026-06-19 20:51 339512f

• server: weave version id into download S3 key (ultra-fuzz Run #1 Storage HIGH)

  Max Johnson 2026-06-19 20:51 b0f29b7

• synckit-client: enforce https for non-loopback sync servers

  Max Johnson 2026-06-19 19:54 631ef45

• synckit-client: order sync conflicts by hybrid logical clock

  Max Johnson 2026-06-19 19:28 27defcd

• sando: drop plans/ from git (relocated to _private Syncthing layer)

  Max Johnson 2026-06-19 17:54 2696457

• mt: bound directory count + tighten search query (ultra-fuzz P1, P4)

  Max Johnson 2026-06-19 17:51 cd0acf5

• mt: clear ultra-fuzz minor batch (S-2, U3, draft, link_preview, CSP, category awaits)

  Max Johnson 2026-06-19 17:40 a0494c2

• mt: branded in-handler error pages + filter-preserving pagination (ultra-fuzz U1, U2)

  Max Johnson 2026-06-19 02:57 3845886

• mt: supervise background sweeps + exclude mod-removed posts from profile counts (ultra-fuzz P-sup, B1/B2)

  Max Johnson 2026-06-19 02:45 9f0d497

• mt: stop trusting attacker-controlled X-Forwarded-For for rate limiting (ultra-fuzz C1)

  Max Johnson 2026-06-19 02:36 7f0555e

• mt+server: close internal-API replay chain (ultra-fuzz C2+E1)

  Max Johnson 2026-06-19 02:29 21d5371

• sando+server: boot_smoke probes /health on a known port instead of liveness-only

  Max Johnson 2026-06-19 01:27 a0a22c5

• sando: refuse to build on a non-build host (ultra-fuzz structural, never build on prod)

  Max Johnson 2026-06-19 01:21 c58cbb7

• bento: collapse a nested if in runner (clippy, rust 1.95)

  Max Johnson 2026-06-19 01:10 b058fc7

• bento: seal publish behind an unforgeable PublishAuthority (ultra-fuzz structural)

  Max Johnson 2026-06-19 01:09 15f1353

• sando: clear clippy lints from toolchain drift (rust 1.95)

  Max Johnson 2026-06-19 01:05 294d309

• sando: fail closed on a serving tier with no promotion gate (ultra-fuzz structural CF1)

  Max Johnson 2026-06-19 01:03 c106137

• server: close license-activation revoke TOCTOU; stop pending-refund dup re-queue

  Max Johnson 2026-06-18 22:43 f42d2d0

• server: fix join-wizard HTMX validation input loss; clamp discover paging

  Max Johnson 2026-06-18 22:35 4674725

• server: bound per-tick scheduler sweeps; anchor request-timeout exemptions

  Max Johnson 2026-06-18 22:00 349dc7f

• server: govern OAuth read routes; harden passkey + password-verify paths

  Max Johnson 2026-06-18 21:44 75b315b

• server: make gallery confirm idempotent (STOR-S1)

  Max Johnson 2026-06-18 21:31 73fc8c6

• mt: harden the image upload pipeline (F2, F5)

  Max Johnson 2026-06-18 20:09 8828d87

• mt: restore destructive-action confirmations (F1)

  Max Johnson 2026-06-18 20:09 a19e4df

• mt: paginate and flatten list_tracked_threads (F4)

  Max Johnson 2026-06-18 20:09 77e8471

• mt: bound ?sort=replies with a trigger-maintained post_count (F3)

  Max Johnson 2026-06-18 20:01 f8cd220

• Drop create_item redundant slug pre-check loop

  Max Johnson 2026-06-18 02:27 1fb0a75

• Sweep Run #22 minors: media presign tier cap, bounded scheduler spawns, session cap

  Max Johnson 2026-06-18 02:20 5342e16

• Fix UX-1: move free-text out of inline onclick JS-string context

  Max Johnson 2026-06-18 02:07 0a50783