-
Require CDN_BASE_URL everywhere so no cover URL can expire
-
server: adopt lint block, fix clippy, fmt
-
Format the tree with rustfmt and add the lint + supply-chain gates
-
Decompose AppState Phase 2: migrate pages/dashboard to slices
-
Surface HTMX errors on every route and de-panic redirects (ultra-fuzz Run 11 UX)
-
Type-seal project price writes and tighten money paths (ultra-fuzz Run 11 Payments)
-
Enforce price cap on JSON path and stop wizard input loss (ultra-fuzz Run 10 UX)
-
ux: friendly errors for validated extractors, widen hide/strobe guards, posture+clamp fixes
-
storage: cover liveness by bare s3_key; ranged read for media sniff
-
server: gallery/carousel, promo-validator, fuzz #11/#12 remediations, embed port, observability
-
launch-eve audit pass: Ultra Fuzz Runs #8-9 + cross-cutting sweeps
-
R27-UX-M3: AppError::Validation now carries per-field errors
-
exorcise: B15b routes/pages/ + root routes doc comments