-
Require CDN_BASE_URL everywhere so no cover URL can expire
-
Exorcise sweep: strip AI tells from server copy, comments, and docs
-
server: adopt lint block, fix clippy, fmt
-
wam: authenticate the ticket API with a shared bearer token
-
Format the tree with rustfmt and add the lint + supply-chain gates
-
Bump rand to 0.10 across MNW crates
-
Add inbound infra-alert ingestion endpoint
-
Group Config and AppState into cohesive sub-structs
-
server: split public image content into a separate CDN bucket (S1)
-
Treat ClamAV as a full-file scan backstop only up to declared coverage
-
Remediate audit Run 21 findings across server
-
Cap platform credit as spend-once balance; authenticate inbound sender
-
Require CDN in production and tighten storage key checks (ultra-fuzz Run 10 Storage)
-
Enforce >=32-char floor on service secrets; sanitize spool suffix
-
Harden git SSH limits and expand YARA corpus (ultra-fuzz Run 6 Security)
-
Fix SEC-S2: harden YARA corpus floor + expand conservative ruleset
-
server: creator custom pages (HTML/CSS) on u.makenot.work
-
server: fold in outstanding working-tree changes
-
Run #14 remediation: governor sweeper, scan/storage/payments hardening
-
server: delegated login ("Sign in with Makenot.work") for testnot
-
server: site access gate for testnot (fan+/creator only)
-
server: rewrite scan pipeline (async + dashboard + 5 new layers)
-
v0.6.5: UX audit consolidation + inline-style sweep + founder pricing
-
v0.6.1: accept multiple Stripe webhook signing secrets