max / makenotwork

• server: adopt lint block, fix clippy, fmt

  Max Johnson 2026-07-24 16:13 f82abcc

• Bump the tower/axum middleware cluster (server, kberg)

  Max Johnson 2026-07-22 19:40 3935637

• Format the tree with rustfmt and add the lint + supply-chain gates

  Max Johnson 2026-07-21 20:45 a64ec63

• Bump rand to 0.10 across MNW crates

  Max Johnson 2026-07-21 00:19 4d1b1ff

• Decompose AppState Phase 2: migrate oauth to slices

  Max Johnson 2026-07-13 20:32 886154b

• Remediate audit Run 22 fix-first findings; bump to 0.10.8

  Max Johnson 2026-07-04 21:42 bfd4533

• server: flip OAuth empty-scope to userinfo; validate build signing_key_path

  Max Johnson 2026-07-02 16:52 3bcd9e3

• audit Run 16 Phase 1: Security axis A- -> A

  Max Johnson 2026-07-02 13:15 fb85bab

• Consolidate the login gate and type-witness admin writes (ultra-fuzz Run 11 Security)

  Max Johnson 2026-06-30 17:43 1f0c86a

• Run CPU-bound Argon2 off the async runtime (ultra-fuzz Run 10 C1)

  Max Johnson 2026-06-30 13:39 ea22104

• ux: friendly errors for validated extractors, widen hide/strobe guards, posture+clamp fixes

  Max Johnson 2026-06-24 23:13 832b7b7

• ux: build OAuth redirects with real URL parsing (preserve query + fragment)

  Max Johnson 2026-06-24 20:32 e2b6070

• security: close OAuth silent-consent gap, ClamAV fail-open observability, 7z/RAR + blame hardening

  Max Johnson 2026-06-24 19:59 6fcfeee

• security: seal token-liveness, per-key identity, private-repo issue authz (ultra-fuzz Run 4, A+)

  Max Johnson 2026-06-23 23:20 108bd59

• server: structural scan fail-closed honesty, spool perms, oauth client binding (ultra-fuzz Run 2 Security)

  Max Johnson 2026-06-23 17:04 cb8adae

• server: hash OAuth authorization codes at rest (ultra-fuzz Run #1 --deep Phase 2)

  Max Johnson 2026-06-22 21:56 cd46703

• server: harden OAuth code redemption + challenge length (ultra-fuzz Run #1 Security LOWs)

  Max Johnson 2026-06-19 21:10 0268eb4

• server: govern OAuth read routes; harden passkey + password-verify paths

  Max Johnson 2026-06-18 21:44 75b315b

• Scan archive interiors recursively; close OAuth/admin gaps

  Max Johnson 2026-06-16 22:54 abb31f1

• OAuth maturation + HMAC method+path+nonce (close MT S13)

  Max Johnson 2026-06-15 21:46 9e71f3a

• launch-eve audit pass: Ultra Fuzz Runs #8-9 + cross-cutting sweeps

  Max Johnson 2026-06-01 00:37 3dc8dca

• server: replace global CSRF allowlist with per-route posture helpers

  Max J. 2026-05-27 05:14 a8f9880

• server: audit MaybeUser sites; introduce MaybeUserVerified

  Max J. 2026-05-25 23:31 2a7414c

• Run 27 MINOR batch: 15 nit-tier items + U3 carry-over

  Max J. 2026-05-22 14:58 e95f476

• v0.8.0: SyncKit true per-key storage

  Max J. 2026-05-22 00:22 6586d77

• Add /oauth/userinfo perks object for external implementers

  Max J. 2026-05-15 16:18 55e72a7

• Convert .map_err Internal(anyhow!) to ResultExt::context, fix variant misuse

  Max J. 2026-05-15 03:45 d3ff18a

• Add Email validated newtype, replace ad-hoc email handling

  Max J. 2026-05-15 01:38 4ea58fd