-
Gate OTA artifact serving on a malware scan
-
Give scheduler lock a dedicated pool; drain worker quarantine spawns
-
Harden ClamAV to fail-closed; drop dead code; anti-spray rate-limit
-
Seal pricing-format/slug drift and add Cloudflare quarantine cache-purge
-
sando+server: boot_smoke probes /health on a known port instead of liveness-only
-
Stream git clone packfile and gate clone concurrency
-
Harden server across 5 audit axes (ultra-fuzz Run #19 remediation)