-
server: delegated login ("Sign in with Makenot.work") for testnot
-
server: site access gate for testnot (fan+/creator only)
-
server: gallery/carousel, promo-validator, fuzz #11/#12 remediations, embed port, observability
-
launch-eve audit pass: Ultra Fuzz Runs #8-9 + cross-cutting sweeps
-
server: close Ultra Fuzz Run #4 phases 1-5 + 41-test integration triage
-
server: replace global CSRF allowlist with per-route posture helpers
-
Run 27 MINOR batch: 15 nit-tier items + U3 carry-over
-
Ultra Fuzz Run 27: 32 of 33 audit items remediated
-
Convert .map_err Internal(anyhow!) to ResultExt::context, fix variant misuse
-
Add Email validated newtype, replace ad-hoc email handling
-
v0.5.16: Fix SyncKit device registration, doc fuzz cleanup, code fuzz fixes
-
Fix auth rate limiter hitting GET /login, add unique test IPs
-
Audit Run 16: type safety, performance, dedup, testing (A- -> A)
-
Add sandbox mode: ephemeral creator accounts for dashboard exploration
-
v0.4.1: Creator trust audit, security hardening, account lifecycle
-
Security audit: fix 23 flaws from adversarial code fuzz, harden test suite
-
Stripe/McMaster-Carr quality remediations
-
Restructure into monorepo