max / makenotwork

• Require CDN_BASE_URL everywhere so no cover URL can expire

  Max Johnson 2026-07-30 19:44 3e3b1d1

• Exorcise sweep: strip AI tells from server copy, comments, and docs

  Max Johnson 2026-07-27 21:11 562950d

• server: adopt lint block, fix clippy, fmt

  Max Johnson 2026-07-24 16:13 f82abcc

• Format the tree with rustfmt and add the lint + supply-chain gates

  Max Johnson 2026-07-21 20:45 a64ec63

• server: split public image content into a separate CDN bucket (S1)

  Max Johnson 2026-07-07 20:49 5bec81b

• Scan-then-promote uploads to immutable content keys (C1)

  Max Johnson 2026-07-07 04:02 ed08ae5

• Fix OTA quarantine deleting from the wrong S3 bucket

  Max Johnson 2026-07-06 13:17 703a7ec

• server: cap buffered scan download to recorded size + slack

  Max Johnson 2026-07-05 15:50 f58201d

• Remediate audit Run 22 fix-first findings; bump to 0.10.8

  Max Johnson 2026-07-04 21:42 bfd4533

• observability: scan verdict, duration, and queue-depth metrics (audit Run 20 Phase 8)

  Max Johnson 2026-07-03 07:55 0df7c95

• audit Run 15 Phase 3: storage fail-open fixes

  Max Johnson 2026-07-02 00:58 2389eaa

• Harden caching, malware quarantine, and account-cleanup fail modes

  Max Johnson 2026-07-01 21:09 a6fd76d

• Gate OTA artifact serving on a malware scan

  Max Johnson 2026-07-01 18:13 28927b4

• Give scheduler lock a dedicated pool; drain worker quarantine spawns

  Max Johnson 2026-06-25 05:12 e9ecf1b

• Harden ClamAV to fail-closed; drop dead code; anti-spray rate-limit

  Max Johnson 2026-06-25 03:33 5dd4ce3

• security: close OAuth silent-consent gap, ClamAV fail-open observability, 7z/RAR + blame hardening

  Max Johnson 2026-06-24 19:59 6fcfeee

• security: seal token-liveness, per-key identity, private-repo issue authz (ultra-fuzz Run 4, A+)

  Max Johnson 2026-06-23 23:20 108bd59

• Seal pricing-format/slug drift and add Cloudflare quarantine cache-purge

  Max Johnson 2026-06-23 19:11 14b7fbf

• server: supervise scheduler, cap internal broadcast, unblock git2 walk, single-pass archive scan (ultra-fuzz Run 2 Perf CRITICAL + SERIOUS)

  Max Johnson 2026-06-23 15:56 d49b61c

• server: seal S3 keys behind a typed builder; close storage A+ gaps (ultra-fuzz Run #1 --deep Phase 3)

  Max Johnson 2026-06-22 22:25 150f0c2

• Remediate Run #21 moderate/low findings

  Max Johnson 2026-06-15 23:19 8324228

• Fail closed when ClamAV can't fully scan (CHRONIC S1)

  Max Johnson 2026-06-15 23:10 aa2b1fe

• Stop cover-image replace from taking published tracks offline

  Max Johnson 2026-06-15 22:19 e218483

• Harden server across 5 audit axes (ultra-fuzz Run #19 remediation)

  Max Johnson 2026-06-13 20:36 af2c94f

• server: Tier 0 creator theming + fold in Run 18 storage work

  Max Johnson 2026-06-13 00:07 e2a8381

• server: fold in outstanding working-tree changes

  Max Johnson 2026-06-12 21:29 a27ad4d

• Run #15: fix 5 SERIOUS findings; seal subscription access gate

  Max Johnson 2026-06-09 06:25 97c0023

• server: Ultra Fuzz Run #13 remediation — security fixes + chronic structural fix

  Max Johnson 2026-06-08 20:18 86b9a09

• server: gallery/carousel, promo-validator, fuzz #11/#12 remediations, embed port, observability

  Max Johnson 2026-06-07 15:10 9cceb18

• launch-eve audit pass: Ultra Fuzz Runs #8-9 + cross-cutting sweeps

  Max Johnson 2026-06-01 00:37 3dc8dca