-
Exorcise sweep: strip AI tells from server copy, comments, and docs
-
server: adopt lint block, fix clippy, fmt
-
Format the tree with rustfmt and add the lint + supply-chain gates
-
payments: close refund crash-window, seal enforcement_mode enum, license-key idempotency
-
server: line-aware cart refunds + orphaned-paid-session escalation (ultra-fuzz Run 2 Payments SERIOUS)
-
Fix PAY-S1: release a pending-refund claim when processing fails
-
Make Fan+ renewal credit issuance idempotent per invoice period
-
Harden server across 5 audit axes (ultra-fuzz Run #19 remediation)
-
server: Ultra Fuzz Run #13 remediation — security fixes + chronic structural fix
-
server: gallery/carousel, promo-validator, fuzz #11/#12 remediations, embed port, observability
-
test: migrate stripe webhook tests to rc.5 JSON fixtures
-
Audit coverage push + docengine assumptions feature