-
Name the class of email you cannot opt out of, in code and to the user
-
server: adopt lint block, fix clippy, fmt
-
Format the tree with rustfmt and add the lint + supply-chain gates
-
Decompose AppState Phase 2: migrate pages/public + finish blog
-
Harden invites and TOTP replay; add enum-drift guard
-
Consolidate the login gate and type-witness admin writes (ultra-fuzz Run 11 Security)
-
security: fall through to backup codes on TOTP decrypt failure