-
server: line-aware cart refunds + orphaned-paid-session escalation (ultra-fuzz Run 2 Payments SERIOUS)
-
synckit: enforce paid-only first-party sync + authoritative blob size + atomic caps (ultra-fuzz Run 3 #1/#2/#3)
-
server: supervise scheduler, cap internal broadcast, unblock git2 walk, single-pass archive scan (ultra-fuzz Run 2 Perf CRITICAL + SERIOUS)
-
mt: lockfile for tokio-util (image streaming dep)
-
mt: proxy external Fan+ images, static template-500 fallback (ultra-fuzz M-UX1 + UX NOTE)
-
mt: stream image serves, rate-limit, segregate pools, bound governor (ultra-fuzz S1/Mi1/M-Pf1-3)
-
mt: make username reconcile and post creation atomic (ultra-fuzz S2 + M-St1)
-
mt: seal resource-in-community behind CommunityScope (ultra-fuzz CHRONIC C1)
-
mt: bind every mod-log write to its mutation's transaction (ultra-fuzz Run #5 S3 + M-DI1)
-
sando: typed-body envelope seal + confirm-modal coverage (UX/API A+, ultra-fuzz Run 2 deep Phase 5)
-
sando: restart reconcile + real metrics + split event bus (Perf A+, ultra-fuzz Run 2 deep Phase 4)
-
sando: backup plausibility floor + checked terminal writes + tx prune (Storage A+, ultra-fuzz Run 2 deep Phase 3)
-
sando: add node_health post-deploy gate; boot_smoke is host-only (Gate SM A+, ultra-fuzz Run 2 deep Phase 2)
-
sando: seal self-update provenance + bearer-gate reads (Security A+, ultra-fuzz Run 2 deep Phase 1)
-
bento: wire the agent protocol-version skew check (Run 3 wiring)
-
bento: stream AgentRpc::pull to disk (Run 3 performance)
-
bento: retention skips in-flight versions (Run 3 storage)
-
bento: prove sh_quote adversarially + document /metrics posture (Run 3 security)
-
bento: latest-wins cooperative cancel + gatekeeper auto-grant + checked publish ledger (Run 3 S1/S2/S3)
-
bento: sync tui Cargo.lock after tokio-stream dep
-
bento: bound request bodies, stream logs, protocol-version the agent wire (Run 2 S6 + wiring)
-
bento: emit real metrics + bound captured output tail (Run 2 perf)
-
bento: WAL + event-driven finalize + retention (Run 2 S1/S1b/S4/CHRONIC-1)
-
bento: enforce publish monotonicity + restart recovery (Run 2 S5/S2)
-
bento: close agent /pull RCE-read + harden command surface (Run 2 CR1/CR2/S3)
-
sando: wire gate wall-clock ceiling (Timeout now live); drop dead StayedUp (Run 2)
-
sando: verify binary arch at promote; gzip -t the testnot refresh (Run 2)
-
sando: close self-update/rebuild restart race; test CF2 startup guard (Run 2)
-
sando: seal tier-state forward-advance; WAL+busy_timeout; lock /confirm (Run 2 S1/F2/F3)
-
sando: fix TUI compile + gate both crates via workspace (ultra-fuzz Run 2 C1)