-
Fail the render when the CSRF token cannot be stored
-
multithreaded: add the deleted-threads surface so a deleted thread can come back
-
multithreaded: add restore as its own mod action
-
multithreaded: adopt lint block, fix clippy, fmt
-
Format the tree with rustfmt and add the lint + supply-chain gates
-
mt: forbid banning or muting the platform admin
-
mt: freeze moderation mutations on a suspended community
-
Remediate audit findings: SSRF userinfo bypass, guest role, C1 scope gaps
-
mt: seal resource-in-community behind CommunityScope (ultra-fuzz CHRONIC C1)
-
mt: bind every mod-log write to its mutation's transaction (ultra-fuzz Run #5 S3 + M-DI1)