-
server: adopt lint block, fix clippy, fmt
-
Format the tree with rustfmt and add the lint + supply-chain gates
-
perf: cap project-metadata export and break zip walk early (audit Run 20 Phase 7)
-
audit Run 14 Phase 0: reject line breaks in single-line titles, dedup instrument, align archive verdict
-
Consolidate the login gate and type-witness admin writes (ultra-fuzz Run 11 Security)
-
Close security gaps from ultra-fuzz Run 10 (Security axis)
-
security: seal git-push CSRF, close 7z/RAR polyglot evasion, exhaustive sanitizer allowlists
-
security: close OAuth silent-consent gap, ClamAV fail-open observability, 7z/RAR + blame hardening
-
Background Stripe fan-outs and close perf cliffs (ultra-fuzz Run 6 Performance)
-
server: supervise scheduler, cap internal broadcast, unblock git2 walk, single-pass archive scan (ultra-fuzz Run 2 Perf CRITICAL + SERIOUS)
-
Scan archive interiors recursively; close OAuth/admin gaps
-
Remediate Run #21 moderate/low findings