-
Drop the audit_review.md citations
-
Gate flagging and image upload on write-level authz
-
multithreaded: adopt lint block, fix clippy, fmt
-
Format the tree with rustfmt and add the lint + supply-chain gates
-
mt: cap image upload while streaming, not after buffering
-
Remediate audit findings: SSRF userinfo bypass, guest role, C1 scope gaps
-
mt: proxy external Fan+ images, static template-500 fallback (ultra-fuzz M-UX1 + UX NOTE)
-
mt: stream image serves, rate-limit, segregate pools, bound governor (ultra-fuzz S1/Mi1/M-Pf1-3)
-
mt: bind every mod-log write to its mutation's transaction (ultra-fuzz Run #5 S3 + M-DI1)