-
Alert on security signals instead of accumulating them
-
Log CSP violations that the default filter was discarding
-
Require CDN_BASE_URL everywhere so no cover URL can expire
-
Add CSP violation reporting
-
server: allow loopback callbacks in form-action CSP for /oauth/authorize
-
server: adopt lint block, fix clippy, fmt
-
server: drop the /metrics scrape endpoint and the Grafana link
-
Format the tree with rustfmt and add the lint + supply-chain gates
-
mnw-server: rustdoc bridge marker to maintainer wiki