-
Fail the render when the CSRF token cannot be stored
-
Normalize comment banners to house style; strip AI-tell dashes in strings
-
multithreaded: adopt lint block, fix clippy, fmt
-
Format the tree with rustfmt and add the lint + supply-chain gates
-
mt: make reply insert conditional on a live, unlocked thread
-
mt: scope verify_quotes to the quoting post's community
-
Remediate audit findings: SSRF userinfo bypass, guest role, C1 scope gaps
-
mt: make username reconcile and post creation atomic (ultra-fuzz S2 + M-St1)
-
mt: seal resource-in-community behind CommunityScope (ultra-fuzz CHRONIC C1)
-
mt: bind every mod-log write to its mutation's transaction (ultra-fuzz Run #5 S3 + M-DI1)