-
server: adopt lint block, fix clippy, fmt
-
Format the tree with rustfmt and add the lint + supply-chain gates
-
Enforce >=32-char floor on service secrets; sanitize spool suffix
-
Background Stripe fan-outs and close perf cliffs (ultra-fuzz Run 6 Performance)
-
perf: stream CSV exports + close hot/cold-path inefficiencies (ultra-fuzz Run 4, A+)
-
server: structural scan fail-closed honesty, spool perms, oauth client binding (ultra-fuzz Run 2 Security)
-
Harden server across 5 audit axes (ultra-fuzz Run #19 remediation)
-
server: fold in outstanding working-tree changes
-
Run #15: fix 5 SERIOUS findings; seal subscription access gate
-
server: scan-spool orphan reaper + systemd StateDirectory
-
server: parallel path-based entries on structural + signing layers
-
server: wire fs2 statvfs into scan spool free-space check
-
server: introduce scanning::spool module and spool constants