max / makenotwork

• Fund the Fan+ credit from the platform, not the creator (ultra-fuzz Run 12 Payments)

  Max Johnson 2026-07-01 13:39 7a78878

• Release server v0.10.7

  Max Johnson 2026-07-01 12:04 75fd955

• server: hide grid results in list view on discover page

  Max Johnson 2026-07-01 12:04 c68af8b

• Reject zero-width and bidi characters in display names and link titles (ultra-fuzz Run 10 UX N1)

  Max Johnson 2026-06-30 19:18 39ed9e1

• Surface HTMX errors on every route and de-panic redirects (ultra-fuzz Run 11 UX)

  Max Johnson 2026-06-30 18:46 f361c2f

• Cut dashboard/discover/feed query cost and stop orphaning builds (ultra-fuzz Run 11 Performance)

  Max Johnson 2026-06-30 18:36 f801710

• Type the S3 bucket noun and harden multipart/delete (ultra-fuzz Run 11 Storage)

  Max Johnson 2026-06-30 17:57 fb4ac6e

• Consolidate the login gate and type-witness admin writes (ultra-fuzz Run 11 Security)

  Max Johnson 2026-06-30 17:43 1f0c86a

• Type-seal project price writes and tighten money paths (ultra-fuzz Run 11 Payments)

  Max Johnson 2026-06-30 17:14 803b50d

• Enforce price cap on JSON path and stop wizard input loss (ultra-fuzz Run 10 UX)

  Max Johnson 2026-06-30 14:38 947d6f6

• Bound unbounded work and unblock the runtime (ultra-fuzz Run 10 Performance)

  Max Johnson 2026-06-30 14:28 c906608

• Require CDN in production and tighten storage key checks (ultra-fuzz Run 10 Storage)

  Max Johnson 2026-06-30 14:13 5716d14

• Close security gaps from ultra-fuzz Run 10 (Security axis)

  Max Johnson 2026-06-30 14:06 b2e6376

• Tighten checkout guards and document promo use semantics (ultra-fuzz Run 10 Payments)

  Max Johnson 2026-06-30 13:49 111861a

• Run CPU-bound Argon2 off the async runtime (ultra-fuzz Run 10 C1)

  Max Johnson 2026-06-30 13:39 ea22104

• Route custom-pages dollars() through the canonical formatter

  Max Johnson 2026-06-25 05:14 de16361

• Give scheduler lock a dedicated pool; drain worker quarantine spawns

  Max Johnson 2026-06-25 05:12 e9ecf1b

• Run item-cover idempotency check before the storage-cap check

  Max Johnson 2026-06-25 05:06 0994faa

• Enforce >=32-char floor on service secrets; sanitize spool suffix

  Max Johnson 2026-06-25 05:01 fed7af7

• Store NULL, not "unknown", for PI-less transaction completions

  Max Johnson 2026-06-25 04:58 4ab32de

• Surface server error messages on HTMX failures; inline profile errors

  Max Johnson 2026-06-25 04:29 9206c0d

• Kill route N+1s, parallelize builds by host, unify scan entry points

  Max Johnson 2026-06-25 04:01 bacacb7

• Harden ClamAV to fail-closed; drop dead code; anti-spray rate-limit

  Max Johnson 2026-06-25 03:33 5dd4ce3

• Fix inline item-edit price-zeroing; guard refund double-submit

  Max Johnson 2026-06-25 03:19 6db89d5

• ux: seal cookie-auth mutations to the CsrfRouter, at-rule + XSS tests

  Max Johnson 2026-06-25 01:37 1172a83

• perf: one maintenance scheduler, shared scan external-lookup helper

  Max Johnson 2026-06-25 01:09 5a70e76

• storage: make multipart abort-on-failure structural

  Max Johnson 2026-06-25 00:46 0cb8326

• security: owner-scope blog/item mutations, polyglot + moderation tests

  Max Johnson 2026-06-25 00:42 63e6a80

• payments: seal StripeAccountId + cart ItemType, add DB-layer tests

  Max Johnson 2026-06-25 00:07 b412e48

• ux: friendly errors for validated extractors, widen hide/strobe guards, posture+clamp fixes

  Max Johnson 2026-06-24 23:13 832b7b7