-
server: close Ultra Fuzz Run #4 phases 1-5 + 41-test integration triage
-
server: replace global CSRF allowlist with per-route posture helpers
-
v0.6.16: pg_stat_activity saturation alert + caddy-ask concurrency cap
-
test: add missing Config fields to integration test harness
-
v0.6.1: accept multiple Stripe webhook signing secrets
-
Audit coverage push + docengine assumptions feature