-
server: adopt lint block, fix clippy, fmt
-
Format the tree with rustfmt and add the lint + supply-chain gates
-
security: seal git-push CSRF, close 7z/RAR polyglot evasion, exhaustive sanitizer allowlists
-
security: close OAuth silent-consent gap, ClamAV fail-open observability, 7z/RAR + blame hardening
-
server: hash OAuth authorization codes at rest (ultra-fuzz Run #1 --deep Phase 2)
-
server: harden OAuth code redemption + challenge length (ultra-fuzz Run #1 Security LOWs)
-
OAuth maturation + HMAC method+path+nonce (close MT S13)
-
server: close Ultra Fuzz Run #4 phases 1-5 + 41-test integration triage