-
Name the class of email you cannot opt out of, in code and to the user
-
Denominate every creator sale in the creator's settlement currency
-
Run the sandbox cap tests in every configuration
-
Choose rate limits at runtime, so CI tests the limiter that ships
-
Close seven loose-wire audit findings
-
Require CDN_BASE_URL everywhere so no cover URL can expire
-
server: adopt lint block, fix clippy, fmt
-
Format the tree with rustfmt and add the lint + supply-chain gates
-
Fix discover facet count correctness
-
Add inbound infra-alert ingestion endpoint
-
Decompose AppState Phase 2: finish auth + retire spawn_email!
-
Group Config and AppState into cohesive sub-structs
-
Route mnw-admin CLI moderation through shared due-process service
-
server: split public image content into a separate CDN bucket (S1)
-
security: seal admin gate, close export quarantine bypass, drop legacy sessions (audit Run 20 Phase 2)
-
Cap platform credit as spend-once balance; authenticate inbound sender
-
Scope internal-API identity to a signed SSH-authenticated assertion
-
Consolidate the login gate and type-witness admin writes (ultra-fuzz Run 11 Security)
-
Close security gaps from ultra-fuzz Run 10 (Security axis)
-
Run CPU-bound Argon2 off the async runtime (ultra-fuzz Run 10 C1)
-
server: drive Payments axis to A+ (ultra-fuzz Run #1 --deep Phase 1)
-
server: govern OAuth read routes; harden passkey + password-verify paths
-
Sweep Run #22 minors: media presign tier cap, bounded scheduler spawns, session cap
-
Perf: shared HTTP client; bounded-parallel admin bulk actions
-
server: creator custom pages (HTML/CSS) on u.makenot.work