-
server: parallel path-based entries on yara/zip/sniff layers
-
server: wire fs2 statvfs into scan spool free-space check
-
server: introduce scanning::spool module and spool constants
-
server: add download_stream to StorageBackend
-
s3-storage: add download_stream returning the SDK ByteStream
-
server: bound broadcast fan-out at 16 with 100ms cadence
-
server: hourly retention sweep on scan_jobs
-
server: drop scan permit across S3 download
-
server: clear five Phase 1 caps from Ultra Fuzz Run #4
-
server: replace global CSRF allowlist with per-route posture helpers
-
server: gate suspended users out of profile and synckit billing mutations
-
server: convert remaining identity-leak surfaces to MaybeUserVerified
-
server: audit MaybeUser sites; introduce MaybeUserVerified
-
shared/pom-contract: schema-drift guard for /api/health producers
-
pom: drop checks.git_storage assertion on the mnw health target
-
wam: Phase 3 — stats/export/prune commands + TUI inline edit
-
shared: theme-common delete-by-id + preview palette, updater progress + markdown hook
-
server: minor audit polish (5 fixes from Ultra Fuzz Run #1)
-
pom: wire scan_pipeline target on hetzner
-
pom: scan-pipeline check + alerting
-
server: add /admin/uploads/health.json for PoM scan-pipeline check
-
server: scan dashboard Phase 2b polish
-
server: scan worker resets entity from Scanning on pipeline error
-
server: yara per-file fail-open on compile error
-
server: synckit-app-sub end-user billing (first-party apps)
-
server: design-system shadow + hover/active state overhaul
-
server: remove completed exorcise plan docs
-
sando: update MakeMachine hardware BOM (Threadripper Pro + 512 GB)
-
server: add ClamAV + YARA prod setup scripts
-
server: rewrite scan pipeline (async + dashboard + 5 new layers)