-
Require CDN_BASE_URL everywhere so no cover URL can expire
-
server: adopt lint block, fix clippy, fmt
-
Format the tree with rustfmt and add the lint + supply-chain gates
-
Fix discover facet count correctness
-
Decompose AppState Phase 4: route test harness through AppState::build
-
Group Config and AppState into cohesive sub-structs
-
Install TierPrices global in test harnesses; release v0.10.11
-
Fix stale AppState test harnesses (cost_allocation, pricing_comparison)
-
server: split public image content into a separate CDN bucket (S1)
-
Treat ClamAV as a full-file scan backstop only up to declared coverage
-
tests: sanitize project slug from underscore usernames in harness
-
server: fix test harness for spawn_pool shutdown-receiver signature
-
audit Run 15 Phase 1: payments & data-integrity fixes
-
Cap platform credit as spend-once balance; authenticate inbound sender
-
Gate OTA artifact serving on a malware scan
-
Give scheduler lock a dedicated pool; drain worker quarantine spawns
-
Harden ClamAV to fail-closed; drop dead code; anti-spray rate-limit
-
Seal pricing-format/slug drift and add Cloudflare quarantine cache-purge
-
Stream git clone packfile and gate clone concurrency
-
Add creator-tier comp codes via free-trial promo codes
-
server: make S3 orphan-deletion tests deterministic (drain the queue)
-
server: creator custom pages (HTML/CSS) on u.makenot.work
-
server: fold in outstanding working-tree changes
-
Run #14 remediation: governor sweeper, scan/storage/payments hardening
-
server: delegated login ("Sign in with Makenot.work") for testnot
-
server: site access gate for testnot (fan+/creator only)
-
server: gallery/carousel, promo-validator, fuzz #11/#12 remediations, embed port, observability
-
tests: thread cost_allocation + runway_config into AppState literals
-
server: fix cargo test — AppState.tier_prices in harnesses + stale price assertions
-
launch-eve audit pass: Ultra Fuzz Runs #8-9 + cross-cutting sweeps