-
server: write build, issue and scan metadata into refs/notes/mnw/*
-
Replace pointers to deleted docs with the explanation itself
-
Require CDN_BASE_URL everywhere so no cover URL can expire
-
Exorcise sweep: strip AI tells from server copy, comments, and docs
-
server: adopt lint block, fix clippy, fmt
-
Format the tree with rustfmt and add the lint + supply-chain gates
-
server: split public image content into a separate CDN bucket (S1)
-
Scan-then-promote uploads to immutable content keys (C1)
-
Fix OTA quarantine deleting from the wrong S3 bucket
-
server: cap buffered scan download to recorded size + slack
-
Remediate audit Run 22 fix-first findings; bump to 0.10.8
-
observability: scan verdict, duration, and queue-depth metrics (audit Run 20 Phase 8)