-
server: a JSON API for git notes
-
Let the buyer choose who converts, and the collaborator agree to their split
-
Give repositories their own issue notification lists
-
Make the landing notify form work without JS
-
Choose rate limits at runtime, so CI tests the limiter that ships
-
Alert on security signals instead of accumulating them
-
Add CSP violation reporting
-
server: adopt lint block, fix clippy, fmt
-
Bump the tower/axum middleware cluster (server, kberg)
-
Format the tree with rustfmt and add the lint + supply-chain gates
-
Decompose AppState Phase 2: api ownership-helper foundation
-
server: attach per-IP rate limit to guest download route
-
Remediate audit Run 21 findings across server
-
Close security gaps from ultra-fuzz Run 10 (Security axis)
-
Add git personal-access-tokens for HTTPS clone and push
-
server: Tier 0 creator theming + fold in Run 18 storage work