-
pom: ring + webpki-roots for all outbound TLS, drop aws-lc-rs
-
MNW synckit-client/bento/mnw-cli/pom: adopt lint block, fix clippy, fmt
-
Format the tree with rustfmt and add the lint + supply-chain gates
-
Verify TLS chains against both the web PKI and the OS trust store
-
Audit coverage push + docengine assumptions feature