-
Exorcise sweep: strip AI tells from server copy, comments, and docs
-
server: adopt lint block, fix clippy, fmt
-
Format the tree with rustfmt and add the lint + supply-chain gates
-
Decompose AppState Phase 2: migrate remaining api top-level + exports
-
Group Config and AppState into cohesive sub-structs
-
Correct three creator-facing docs to match code
-
security: seal admin gate, close export quarantine bypass, drop legacy sessions (audit Run 20 Phase 2)
-
Observability + API consistency cold spots
-
Frontend: kill media-picker XSS; render_string surfaces errors
-
perf: stream content-export files through a disk spool, not a full RAM buffer
-
server: seal S3 keys behind a typed builder; close storage A+ gaps (ultra-fuzz Run #1 --deep Phase 3)
-
Fix PERF-1: bound content-export memory for legacy NULL-size rows
-
Add global request timeout; background the content export
-
server: gallery/carousel, promo-validator, fuzz #11/#12 remediations, embed port, observability
-
Run 27 MINOR batch: 15 nit-tier items + U3 carry-over
-
Convert .map_err Internal(anyhow!) to ResultExt::context, fix variant misuse