max / makenotwork

• Add CSP violation reporting

  Max Johnson 2026-07-28 16:59 996dc00

• synckit-server: bill group writes to the admin's slot (Groups phase 2, p2-billing)

  Max Johnson 2026-07-23 18:58 be18913

• synckit-server: group-scoped changelog, routes, and its own table (Groups phase 2, p2-changelog)

  Max Johnson 2026-07-23 18:39 730ec79

• Format the tree with rustfmt and add the lint + supply-chain gates

  Max Johnson 2026-07-21 20:45 a64ec63

• Add multipart blob sessions for SyncKit

  Max Johnson 2026-07-21 14:42 7b530ac

• seed: example-marketplace scaffold + Phase 1 creators & projects

  Max Johnson 2026-07-11 19:28 6aaa61e

• server: fix quarantine purge project-cover gap + cover db/scanning (A5, B-Sto1)

  Max Johnson 2026-07-07 22:30 d070e8f

• server: import-job heartbeat + stuck-job reaper, typed status (A5)

  Max Johnson 2026-07-07 21:27 7af46fb

• Remediate audit Run 22 fix-first findings; bump to 0.10.8

  Max Johnson 2026-07-04 21:42 bfd4533

• tests: contract tests for db::users, db::items core, db::synckit_billing + cross-session password revoke

  Max Johnson 2026-07-02 22:41 87a6fd0

• server: money-core db-layer contract tests (db::transactions)

  Max Johnson 2026-07-02 18:02 6df9789

• Test collections and items::bulk db cold spots

  Max Johnson 2026-07-02 14:56 0337663

• Test passkeys, ssh_keys, and issues db cold spots

  Max Johnson 2026-07-02 14:41 f37e74c

• Test db money/race cold spots; fix inert cancel_stale_rotation

  Max Johnson 2026-07-02 14:31 95370d4

• audit Run 15 Phase 3: storage fail-open fixes

  Max Johnson 2026-07-02 00:58 2389eaa

• Harden invites and TOTP replay; add enum-drift guard

  Max Johnson 2026-07-01 17:04 4835beb

• security: owner-scope blog/item mutations, polyglot + moderation tests

  Max Johnson 2026-06-25 00:42 63e6a80

• payments: seal StripeAccountId + cart ItemType, add DB-layer tests

  Max Johnson 2026-06-25 00:07 b412e48

• payments: idempotent re-runnable webhook finalize (ultra-fuzz Run 4 M-Pay1, A+)

  Max Johnson 2026-06-23 22:32 c929c2b

• synckit: invalidate sync tokens on device removal + security audit log (ultra-fuzz --deep Security A+)

  Max Johnson 2026-06-23 20:12 fc0659c

• synckit: enforce paid-only first-party sync + authoritative blob size + atomic caps (ultra-fuzz Run 3 #1/#2/#3)

  Max Johnson 2026-06-23 16:05 5a9a452

• server: drive Payments axis to A+ (ultra-fuzz Run #1 --deep Phase 1)

  Max Johnson 2026-06-22 21:50 2219313

• Add whole-router CSRF coverage manifest + tracker tests

  Max Johnson 2026-06-15 20:22 02b0274

• Add creator-tier comp codes via free-trial promo codes

  Max Johnson 2026-06-15 03:41 4d22775

• server: creator custom pages (HTML/CSS) on u.makenot.work

  Max Johnson 2026-06-13 17:14 2a69968

• server: delegated login ("Sign in with Makenot.work") for testnot

  Max Johnson 2026-06-07 22:44 27e2541

• server: site access gate for testnot (fan+/creator only)

  Max Johnson 2026-06-07 19:51 9cd5e49

• server: gallery/carousel, promo-validator, fuzz #11/#12 remediations, embed port, observability

  Max Johnson 2026-06-07 15:10 9cceb18

• test: streaming workflow gaps (12 tests)

  Max J. 2026-05-22 15:45 e7c0b9a

• test: embed widget workflow coverage (18 tests)

  Max J. 2026-05-22 15:39 e5be484