-
Require CDN_BASE_URL everywhere so no cover URL can expire
-
server: adopt lint block, fix clippy, fmt
-
Format the tree with rustfmt and add the lint + supply-chain gates
-
Decompose AppState Phase 2: migrate pages/public + finish blog
-
Group Config and AppState into cohesive sub-structs
-
perf: scan timeouts on both paths, supervise+lock monitor, background appeal fan-out
-
server: seal S3 keys behind a typed builder; close storage A+ gaps (ultra-fuzz Run #1 --deep Phase 3)
-
Run #15: fix 5 SERIOUS findings; seal subscription access gate
-
Unify subscription access checks; bound scheduler fan-out queries (Run #14)
-
launch-eve audit pass: Ultra Fuzz Runs #8-9 + cross-cutting sweeps
-
server: audit MaybeUser sites; introduce MaybeUserVerified
-
exorcise: B15b routes/pages/ + root routes doc comments
-
v0.6.4: split item page into store (/i/) and library (/l/) views