-
server: adopt lint block, fix clippy, fmt
-
Format the tree with rustfmt and add the lint + supply-chain gates
-
Stop CDN-caching the private feed and couple cache invalidation to deletion (ultra-fuzz Run 12 Security)
-
Harden ClamAV to fail-closed; drop dead code; anti-spray rate-limit
-
Run #14 remediation: governor sweeper, scan/storage/payments hardening
-
server: Ultra Fuzz Run #13 remediation — security fixes + chronic structural fix
-
server: gallery/carousel, promo-validator, fuzz #11/#12 remediations, embed port, observability