-
Drop the audit_review.md citations
-
Gate flagging and image upload on write-level authz
-
multithreaded: adopt lint block, fix clippy, fmt
-
Format the tree with rustfmt and add the lint + supply-chain gates
-
mt: cap image upload while streaming, not after buffering
-
Remediate audit findings: SSRF userinfo bypass, guest role, C1 scope gaps