-
server: adopt lint block, fix clippy, fmt
-
Format the tree with rustfmt and add the lint + supply-chain gates
-
Decompose AppState Phase 2: migrate user_pages + postmark to slices
-
Group Config and AppState into cohesive sub-structs
-
Remediate audit Run 21 findings across server
-
audit Run 15 Phase 2: security fixes
-
Cap platform credit as spend-once balance; authenticate inbound sender
-
Redeliver inbound Postmark email on transient failure (ultra-fuzz Run 12 doubledown)
-
mt+server: close internal-API replay chain (ultra-fuzz C2+E1)