-
server: adopt lint block, fix clippy, fmt
-
Format the tree with rustfmt and add the lint + supply-chain gates
-
server: split public image content into a separate CDN bucket (S1)
-
Require CDN in production and tighten storage key checks (ultra-fuzz Run 10 Storage)
-
storage: cover liveness by bare s3_key; ranged read for media sniff
-
server: convert pending_uploads/pending_s3_deletions/pending_refunds to compile-checked SQL (ultra-fuzz Run #1 --deep Phase 4)
-
server: fold in outstanding working-tree changes
-
Run #15: fix 5 SERIOUS findings; seal subscription access gate
-
server: gallery/carousel, promo-validator, fuzz #11/#12 remediations, embed port, observability
-
launch-eve audit pass: Ultra Fuzz Runs #8-9 + cross-cutting sweeps
-
server: close Ultra Fuzz Run #4 phases 1-5 + 41-test integration triage