-
server: write build, issue and scan metadata into refs/notes/mnw/*
-
server: refuse pushes to the namespaces MNW owns
-
server: feed the notes index from all three ref writers
-
server, mnw-cli: accept notes pushes through an inbox ref
-
Handle the discarded results in the build runner, monitor, and tier prices
-
Exorcise sweep: strip AI tells from server copy, comments, and docs
-
mnw-cli: sign post-receive hooks with the per-repo HMAC
-
server: adopt lint block, fix clippy, fmt
-
Move OTA updater signature onto the artifact
-
server: upgrade sha2 to 0.11, sha1 to 0.11, hmac to 0.13
-
Format the tree with rustfmt and add the lint + supply-chain gates
-
Decompose AppState Phase 5: slice methods + worker projections
-
Decompose AppState Phase 2: migrate ota to slices
-
Group Config and AppState into cohesive sub-structs
-
server: parse build command into escaped argv instead of raw shell interpolation
-
audit Run 15 Phase 4: resilience polish
-
Gate OTA artifact serving on a malware scan
-
Cut dashboard/discover/feed query cost and stop orphaning builds (ultra-fuzz Run 11 Performance)
-
Bound unbounded work and unblock the runtime (ultra-fuzz Run 10 Performance)
-
Kill route N+1s, parallelize builds by host, unify scan entry points
-
server: seal S3 keys behind a typed builder; close storage A+ gaps (ultra-fuzz Run #1 --deep Phase 3)