-
server: adopt lint block, fix clippy, fmt
-
Format the tree with rustfmt and add the lint + supply-chain gates
-
Decompose AppState Phase 2: migrate api/internal to slices
-
Group Config and AppState into cohesive sub-structs
-
Enforce git disk quota on the HTTP push path; validate internal repo_name
-
audit Run 16 Phase 1: Security axis A- -> A
-
Scope internal-API identity to a signed SSH-authenticated assertion
-
Harden the OTA path and stop orphaning S3 on failed cleanup enqueue (ultra-fuzz Run 12 Storage)
-
Convert .map_err Internal(anyhow!) to ResultExt::context, fix variant misuse