max / makenotwork

• Send the SDK key the token grant requires, and record testnot's missing secret

  Max Johnson 2026-08-16 01:08 d08f132

• Send the OAuth token exchange as a form, and walk the write paths to prove it

  Max Johnson 2026-08-16 00:34 09d411f

• Drop the audit_review.md citations

  Max Johnson 2026-08-05 13:55 2cfee03

• Normalize comment banners to house style; strip AI-tell dashes in strings

  Max Johnson 2026-07-24 17:30 7632041

• multithreaded: adopt lint block, fix clippy, fmt

  Max Johnson 2026-07-24 15:06 7a2b0ec

• Format the tree with rustfmt and add the lint + supply-chain gates

  Max Johnson 2026-07-21 20:45 a64ec63

• Bump rand to 0.10 across MNW crates

  Max Johnson 2026-07-21 00:19 4d1b1ff

• mt: give the outbound OAuth calls a per-request timeout

  Max Johnson 2026-07-07 15:08 a66a346

• mt: mirror full identity on userinfo refresh, not just perks

  Max Johnson 2026-07-07 14:46 cb4d22f

• Remediate audit findings: SSRF userinfo bypass, guest role, C1 scope gaps

  Max Johnson 2026-07-04 23:04 8e7b5fd

• server: mt architectural refactors (audit 2026-07-02 follow-up)

  Max Johnson 2026-07-02 22:02 376071e