-
pom: config hardening — env precedence, route validation, secret redaction
-
pom: debounce status transitions (N-of-M) and seed state on restart
-
pom: give the ssh test run a total timeout, not just ConnectTimeout
-
pom: set MissedTickBehavior::Delay on the remaining probe loops
-
pom: persist-and-retry undelivered alerts; fix recovery cooldowns
-
pom: treat a stale health snapshot as unreachable in the offline net
-
pom: cap peer response bodies and re-project mesh into a fixed schema
-
pom: scrub terminal control chars from remote strings; don't panic CORS task
-
pom: stop leaking the API token to the dashboard; rate-limit per IP
-
pom: deliver failure alerts by email when wam_url is unset
-
server: purge expired items and decrement storage in one tx
-
server: run scheduler payments/cleanup I/O off the tick lock
-
gitignore: keep risk-lens fuzz reports out of the public repo
-
mt: make the guest-role migration self-healing
-
mt: give the outbound OAuth calls a per-request timeout
-
mt: forbid banning or muting the platform admin
-
mt: aggregate endorsement counts in the DB for the thread view
-
mt: make reply insert conditional on a live, unlocked thread
-
mt: surface System auto-hide rows in the mod log (LEFT JOIN)
-
mt: freeze moderation mutations on a suspended community
-
mt: close the SSRF integer-IP bypass in link preview
-
mt: cap image upload while streaming, not after buffering
-
mt: verify thread_stats HMAC via the InternalAuth extractor
-
mt: mirror full identity on userinfo refresh, not just perks
-
mt: block owner settings mutations on a suspended community
-
mt: scope verify_quotes to the quoting post's community
-
Scan-then-promote uploads to immutable content keys (C1)
-
Document the deliberate webhook-200/self-owned-retry trade (Payments)
-
Strip off-platform media from creator markdown (block tracking pixels)
-
Enforce the per-item license-key cap atomically under an item-row lock