-
Replace pointers to deleted docs with the explanation itself
-
Require CDN_BASE_URL everywhere so no cover URL can expire
-
Exorcise sweep: strip AI tells from server copy, comments, and docs
-
server: adopt lint block, fix clippy, fmt
-
Format the tree with rustfmt and add the lint + supply-chain gates
-
Decompose AppState Phase 2: migrate storage to slices
-
Scan-then-promote uploads to immutable content keys (C1)
-
Type the S3 bucket noun and harden multipart/delete (ultra-fuzz Run 11 Storage)
-
security: seal git-push CSRF, close 7z/RAR polyglot evasion, exhaustive sanitizer allowlists
-
storage: cover liveness by bare s3_key; ranged read for media sniff
-
storage: require positive image signature at media confirm; cap build log at SQL layer
-
server: seal S3 keys behind a typed builder; close storage A+ gaps (ultra-fuzz Run #1 --deep Phase 3)
-
Sweep Run #22 minors: media presign tier cap, bounded scheduler spawns, session cap
-
Derive media folder/filename from S3 key; sniff real content type; clamp storage SUMs
-
server: Tier 0 creator theming + fold in Run 18 storage work