-
Exorcise sweep: strip AI tells from server copy, comments, and docs
-
server: adopt lint block, fix clippy, fmt
-
Format the tree with rustfmt and add the lint + supply-chain gates
-
synckit: invalidate sync tokens on device removal + security audit log (ultra-fuzz --deep Security A+)
-
synckit: close 2FA login oracle + serialize rotation-complete (ultra-fuzz Run 3 Security #4)