-
Fail the render when the CSRF token cannot be stored
-
multithreaded: add the deleted-threads surface so a deleted thread can come back
-
multithreaded: add restore as its own mod action
-
multithreaded: adopt lint block, fix clippy, fmt
-
Format the tree with rustfmt and add the lint + supply-chain gates
-
mt: forbid banning or muting the platform admin
-
mt: freeze moderation mutations on a suspended community
-
Remediate audit findings: SSRF userinfo bypass, guest role, C1 scope gaps
-
mt: seal resource-in-community behind CommunityScope (ultra-fuzz CHRONIC C1)
-
mt: bind every mod-log write to its mutation's transaction (ultra-fuzz Run #5 S3 + M-DI1)
-
mt: land ultra-fuzz Run #4 remediation (S1, H2, P1/P2, M2, NOTE-1, UX1, security LOWs, P3)
-
Multithreaded second sweep: Community/Storage/UX to A
-
Audit coverage push + docengine assumptions feature