-
server: adopt lint block, fix clippy, fmt
-
Format the tree with rustfmt and add the lint + supply-chain gates
-
Decompose AppState Phase 2: migrate synckit to slices
-
Remediate audit Run 22 fix-first findings; bump to 0.10.8
-
Consolidate the login gate and type-witness admin writes (ultra-fuzz Run 11 Security)
-
Run CPU-bound Argon2 off the async runtime (ultra-fuzz Run 10 C1)
-
security: seal token-liveness, per-key identity, private-repo issue authz (ultra-fuzz Run 4, A+)
-
synckit: invalidate sync tokens on device removal + security audit log (ultra-fuzz --deep Security A+)
-
synckit: close 2FA login oracle + serialize rotation-complete (ultra-fuzz Run 3 Security #4)