-
bento: cover secret() resolution, the /retry route, and the /events WS
-
bento: close the seven release-orchestration audit findings
-
Dedup ct_eq + sando live_log into ops-core; put sando errors on JSON
-
Apply rustfmt across the crate
-
bento: serve GET /status.json, per app rather than per newest build
-
bento: move per-app build config into each app's repo
-
bento: collect over a sync transport, not inline scp
-
ops-core: lift Sando's split event bus into the shared crate
-
bento: prove sh_quote adversarially + document /metrics posture (Run 3 security)
-
bento: bound request bodies, stream logs, protocol-version the agent wire (Run 2 S6 + wiring)
-
sando+bento: remediate ultra-fuzz Run 1 (CF1-5, serious, minors)
-
Add bento, ops-core, and egui-updater crate scaffolds