-
Require CDN_BASE_URL everywhere so no cover URL can expire
-
Exorcise sweep: strip AI tells from server copy, comments, and docs
-
server: adopt lint block, fix clippy, fmt
-
Format the tree with rustfmt and add the lint + supply-chain gates
-
Decompose AppState Phase 2: migrate storage to slices
-
server: split public image content into a separate CDN bucket (S1)
-
Scan-then-promote uploads to immutable content keys (C1)
-
Type the S3 bucket noun and harden multipart/delete (ultra-fuzz Run 11 Storage)
-
Run item-cover idempotency check before the storage-cap check
-
storage: cover liveness by bare s3_key; ranged read for media sniff
-
storage+sanitizer: dedup confirm HEAD calls; seal custom-pages URL-attribute allowlist (ultra-fuzz NOTE tail)
-
server: seal S3 keys behind a typed builder; close storage A+ gaps (ultra-fuzz Run #1 --deep Phase 3)
-
server: enqueue old S3 key inside the replace tx (ultra-fuzz Run #1 Storage LOW)
-
server: Tier 0 creator theming + fold in Run 18 storage work
-
server: gallery/carousel, promo-validator, fuzz #11/#12 remediations, embed port, observability
-
launch-eve audit pass: Ultra Fuzz Runs #8-9 + cross-cutting sweeps
-
server: close Ultra Fuzz Run #4 phases 1-5 + 41-test integration triage
-
server: rewrite scan pipeline (async + dashboard + 5 new layers)
-
Ultra Fuzz Run 27: 32 of 33 audit items remediated