-
sando: seal self-update provenance + bearer-gate reads (Security A+, ultra-fuzz Run 2 deep Phase 1)
-
bento: wire the agent protocol-version skew check (Run 3 wiring)
-
bento: stream AgentRpc::pull to disk (Run 3 performance)
-
bento: retention skips in-flight versions (Run 3 storage)
-
bento: prove sh_quote adversarially + document /metrics posture (Run 3 security)
-
bento: latest-wins cooperative cancel + gatekeeper auto-grant + checked publish ledger (Run 3 S1/S2/S3)
-
bento: sync tui Cargo.lock after tokio-stream dep
-
bento: bound request bodies, stream logs, protocol-version the agent wire (Run 2 S6 + wiring)
-
bento: emit real metrics + bound captured output tail (Run 2 perf)
-
bento: WAL + event-driven finalize + retention (Run 2 S1/S1b/S4/CHRONIC-1)
-
bento: enforce publish monotonicity + restart recovery (Run 2 S5/S2)
-
bento: close agent /pull RCE-read + harden command surface (Run 2 CR1/CR2/S3)
-
sando: wire gate wall-clock ceiling (Timeout now live); drop dead StayedUp (Run 2)
-
sando: verify binary arch at promote; gzip -t the testnot refresh (Run 2)
-
sando: close self-update/rebuild restart race; test CF2 startup guard (Run 2)
-
sando: seal tier-state forward-advance; WAL+busy_timeout; lock /confirm (Run 2 S1/F2/F3)
-
sando: fix TUI compile + gate both crates via workspace (ultra-fuzz Run 2 C1)
-
server: collapse slug allocation into insert_with_unique_slug (ultra-fuzz Run #1 --deep Phase 5)
-
server: convert remaining money-path DB modules to compile-checked SQL (ultra-fuzz Run #1 --deep Phase 4)
-
synckit: bump to 0.5.0; document deep A+ wire formats and the clean-change gate
-
synckit: chunked AEAD blob format (sk3) with streaming, bounded-RAM download
-
synckit: forced clean-change HLC gate via CleanChanges
-
server: convert pending_uploads/pending_s3_deletions/pending_refunds to compile-checked SQL (ultra-fuzz Run #1 --deep Phase 4)
-
server: adopt sqlx-offline; convert db::idempotency to compile-checked SQL (ultra-fuzz Run #1 --deep Phase 4)
-
synckit: typed WireVersion envelope dispatch, reject unknown versions loudly
-
synckit: seal AEAD associated data behind AeadContext
-
server: dedupe pagination range into a shared helper (ultra-fuzz Run #1 --deep Phase 4)
-
synckit: Cents money newtype + typed BillingInterval + retry-idempotency proof
-
server: seal S3 keys behind a typed builder; close storage A+ gaps (ultra-fuzz Run #1 --deep Phase 3)
-
synckit: strongly-typed DeviceId/UserId/AppId newtypes + non_exhaustive responses