-
Migrate to htmx 4, and drop the dead idiomorph extension
-
Correct stale comments across server, tests and mnw-admin
-
A described document carries its own session token
-
Put the description layer inside the CSRF envelope, and let a screen serve its own writes
-
Pin the status every workflow test was only asserting the shape of
-
server: adopt lint block, fix clippy, fmt
-
Format the tree with rustfmt and add the lint + supply-chain gates
-
security: seal admin gate, close export quarantine bypass, drop legacy sessions (audit Run 20 Phase 2)