-
server: adopt lint block, fix clippy, fmt
-
Format the tree with rustfmt and add the lint + supply-chain gates
-
Fix discover facet count correctness
-
Add inbound infra-alert ingestion endpoint
-
server: fix quarantine purge project-cover gap + cover db/scanning (A5, B-Sto1)
-
server: import-job heartbeat + stuck-job reaper, typed status (A5)
-
Remediate audit Run 22 fix-first findings; bump to 0.10.8
-
Remediate audit Run 21 findings across server
-
server: gallery N+1 + ImageId, de-truncate aggregates, keyset paginator
-
Test collections and items::bulk db cold spots
-
Test passkeys, ssh_keys, and issues db cold spots
-
Pin the storage-cap CAS contract at the DB layer
-
Harden invites and TOTP replay; add enum-drift guard
-
Fund the Fan+ credit from the platform, not the creator (ultra-fuzz Run 12 Payments)
-
security: owner-scope blog/item mutations, polyglot + moderation tests
-
payments: seal StripeAccountId + cart ItemType, add DB-layer tests
-
synckit: ship blob-delete API + fix silently-broken sync_log retention (ultra-fuzz --deep Storage A+)
-
server: drive Payments axis to A+ (ultra-fuzz Run #1 --deep Phase 1)
-
test-fuzz Phase 2: pin storage CAS guards + session/report negative paths
-
Add git personal-access-tokens for HTTPS clone and push
-
server: creator custom pages (HTML/CSS) on u.makenot.work
-
server: Ultra Fuzz Run #13 remediation — security fixes + chronic structural fix
-
server: gallery/carousel, promo-validator, fuzz #11/#12 remediations, embed port, observability
-
launch-eve audit pass: Ultra Fuzz Runs #8-9 + cross-cutting sweeps
-
server: rewrite scan pipeline (async + dashboard + 5 new layers)
-
v0.8.0: SyncKit true per-key storage
-
SyncKit v2 billing: open-platform developer billing