-
Require CDN_BASE_URL everywhere so no cover URL can expire
-
Exorcise sweep: strip AI tells from server copy, comments, and docs
-
server: adopt lint block, fix clippy, fmt
-
Format the tree with rustfmt and add the lint + supply-chain gates
-
server: route promote through multipart copy above 5 GiB
-
server: split public image content into a separate CDN bucket (S1)
-
Scan-then-promote uploads to immutable content keys (C1)
-
Bound scan CPU layers + advertise-refs by wall clock; scope project purchase lookup
-
Treat ClamAV as a full-file scan backstop only up to declared coverage
-
Harden caching, malware quarantine, and account-cleanup fail modes
-
Kill route N+1s, parallelize builds by host, unify scan entry points
-
perf: one maintenance scheduler, shared scan external-lookup helper
-
perf: scan timeouts on both paths, supervise+lock monitor, background appeal fan-out
-
perf: set-based sync-log compaction, off-runtime quota walk, bounded scan lookups
-
Background Stripe fan-outs and close perf cliffs (ultra-fuzz Run 6 Performance)
-
perf: stream CSV exports + close hot/cold-path inefficiencies (ultra-fuzz Run 4, A+)
-
server: supervise scheduler, cap internal broadcast, unblock git2 walk, single-pass archive scan (ultra-fuzz Run 2 Perf CRITICAL + SERIOUS)
-
Fix SEC-S2: harden YARA corpus floor + expand conservative ruleset
-
Scan archive interiors recursively; close OAuth/admin gaps
-
Fail closed when ClamAV can't fully scan (CHRONIC S1)
-
Harden server across 5 audit axes (ultra-fuzz Run #19 remediation)
-
server: fold in outstanding working-tree changes
-
Run #14 remediation: governor sweeper, scan/storage/payments hardening
-
launch-eve audit pass: Ultra Fuzz Runs #8-9 + cross-cutting sweeps
-
server: route big-file scans through the streaming pipeline
-
server: introduce scanning::spool module and spool constants
-
server: rewrite scan pipeline (async + dashboard + 5 new layers)
-
Ultra Fuzz Run 27: 32 of 33 audit items remediated