-
Replace pointers to deleted docs with the explanation itself
-
Require CDN_BASE_URL everywhere so no cover URL can expire
-
Exorcise sweep: strip AI tells from server copy, comments, and docs
-
server: adopt lint block, fix clippy, fmt
-
Format the tree with rustfmt and add the lint + supply-chain gates
-
server: route promote through multipart copy above 5 GiB
-
server: split public image content into a separate CDN bucket (S1)
-
Scan-then-promote uploads to immutable content keys (C1)
-
Bound scan CPU layers + advertise-refs by wall clock; scope project purchase lookup
-
Treat ClamAV as a full-file scan backstop only up to declared coverage
-
Harden caching, malware quarantine, and account-cleanup fail modes
-
Kill route N+1s, parallelize builds by host, unify scan entry points
-
perf: one maintenance scheduler, shared scan external-lookup helper
-
perf: scan timeouts on both paths, supervise+lock monitor, background appeal fan-out
-
perf: set-based sync-log compaction, off-runtime quota walk, bounded scan lookups
-
Background Stripe fan-outs and close perf cliffs (ultra-fuzz Run 6 Performance)
-
perf: stream CSV exports + close hot/cold-path inefficiencies (ultra-fuzz Run 4, A+)
-
server: supervise scheduler, cap internal broadcast, unblock git2 walk, single-pass archive scan (ultra-fuzz Run 2 Perf CRITICAL + SERIOUS)
-
Fix SEC-S2: harden YARA corpus floor + expand conservative ruleset
-
Scan archive interiors recursively; close OAuth/admin gaps
-
Fail closed when ClamAV can't fully scan (CHRONIC S1)
-
Harden server across 5 audit axes (ultra-fuzz Run #19 remediation)