-
Choose rate limits at runtime, so CI tests the limiter that ships
-
Spell the product name Makenotwork everywhere it is displayed
-
Require CDN_BASE_URL everywhere so no cover URL can expire
-
Exorcise sweep: strip AI tells from server copy, comments, and docs
-
server: adopt lint block, fix clippy, fmt
-
wam: authenticate the ticket API with a shared bearer token
-
Format the tree with rustfmt and add the lint + supply-chain gates
-
Bump rand to 0.10 across MNW crates
-
Add inbound infra-alert ingestion endpoint
-
Group Config and AppState into cohesive sub-structs
-
server: split public image content into a separate CDN bucket (S1)
-
Treat ClamAV as a full-file scan backstop only up to declared coverage
-
Remediate audit Run 21 findings across server
-
Cap platform credit as spend-once balance; authenticate inbound sender
-
Require CDN in production and tighten storage key checks (ultra-fuzz Run 10 Storage)
-
Enforce >=32-char floor on service secrets; sanitize spool suffix
-
Harden git SSH limits and expand YARA corpus (ultra-fuzz Run 6 Security)
-
Fix SEC-S2: harden YARA corpus floor + expand conservative ruleset
-
server: creator custom pages (HTML/CSS) on u.makenot.work