-
bento: prove sh_quote adversarially + document /metrics posture (Run 3 security)
-
bento: latest-wins cooperative cancel + gatekeeper auto-grant + checked publish ledger (Run 3 S1/S2/S3)
-
bento: sync tui Cargo.lock after tokio-stream dep
-
bento: bound request bodies, stream logs, protocol-version the agent wire (Run 2 S6 + wiring)
-
bento: emit real metrics + bound captured output tail (Run 2 perf)
-
bento: WAL + event-driven finalize + retention (Run 2 S1/S1b/S4/CHRONIC-1)
-
bento: enforce publish monotonicity + restart recovery (Run 2 S5/S2)
-
bento: close agent /pull RCE-read + harden command surface (Run 2 CR1/CR2/S3)
-
sando: wire gate wall-clock ceiling (Timeout now live); drop dead StayedUp (Run 2)
-
sando: verify binary arch at promote; gzip -t the testnot refresh (Run 2)
-
sando: close self-update/rebuild restart race; test CF2 startup guard (Run 2)
-
sando: seal tier-state forward-advance; WAL+busy_timeout; lock /confirm (Run 2 S1/F2/F3)
-
sando: fix TUI compile + gate both crates via workspace (ultra-fuzz Run 2 C1)
-
server: collapse slug allocation into insert_with_unique_slug (ultra-fuzz Run #1 --deep Phase 5)
-
server: convert remaining money-path DB modules to compile-checked SQL (ultra-fuzz Run #1 --deep Phase 4)
-
synckit: bump to 0.5.0; document deep A+ wire formats and the clean-change gate
-
synckit: chunked AEAD blob format (sk3) with streaming, bounded-RAM download
-
synckit: forced clean-change HLC gate via CleanChanges
-
server: convert pending_uploads/pending_s3_deletions/pending_refunds to compile-checked SQL (ultra-fuzz Run #1 --deep Phase 4)
-
server: adopt sqlx-offline; convert db::idempotency to compile-checked SQL (ultra-fuzz Run #1 --deep Phase 4)
-
synckit: typed WireVersion envelope dispatch, reject unknown versions loudly
-
synckit: seal AEAD associated data behind AeadContext
-
server: dedupe pagination range into a shared helper (ultra-fuzz Run #1 --deep Phase 4)
-
synckit: Cents money newtype + typed BillingInterval + retry-idempotency proof
-
server: seal S3 keys behind a typed builder; close storage A+ gaps (ultra-fuzz Run #1 --deep Phase 3)
-
synckit: strongly-typed DeviceId/UserId/AppId newtypes + non_exhaustive responses
-
server: hash OAuth authorization codes at rest (ultra-fuzz Run #1 --deep Phase 2)
-
server: drive Payments axis to A+ (ultra-fuzz Run #1 --deep Phase 1)
-
mt-db: compile-time checked SQL via sqlx macros (ultra-fuzz M3, A+)
-
mt: land ultra-fuzz Run #4 remediation (S1, H2, P1/P2, M2, NOTE-1, UX1, security LOWs, P3)