-
server: adopt lint block, fix clippy, fmt
-
Format the tree with rustfmt and add the lint + supply-chain gates
-
security: seal admin gate, close export quarantine bypass, drop legacy sessions (audit Run 20 Phase 2)
-
Remove now-dead KNOWN_PREAUTH_CSRF_GAPS const
-
Close CHRONIC A': posture-independent CSRF origin gate + drop pre-auth skip
-
Add whole-router CSRF coverage manifest + tracker tests