-
Configure pom as Sando's second app, and take an intake through the seam
-
Mount a router per product, keeping the root as the default
-
Thread the app dimension through Sando's queries
-
Scope Sando's topology sync to one product
-
Refuse to start with two apps until the queries name one
-
Give Sando a product dimension in its configuration
-
Gate docengine again, by letting a test_target name an aux repo
-
Ship multithreaded as a Sando companion
-
sando: gate every database's migrations, not only the server's
-
sando: reconcile deploys against tier_state on startup
-
sando: adopt lint block, fix clippy, fmt
-
sando: remove the Prometheus exporter instead of deciding its auth posture
-
Format the tree with rustfmt and add the lint + supply-chain gates
-
gates: own the scratch cluster's privileges in code
-
sando: harden self-update against self-bricking
-
sando: restart reconcile + real metrics + split event bus (Perf A+, ultra-fuzz Run 2 deep Phase 4)
-
sando: seal self-update provenance + bearer-gate reads (Security A+, ultra-fuzz Run 2 deep Phase 1)
-
sando: close self-update/rebuild restart race; test CF2 startup guard (Run 2)