-
Exorcise sweep: strip AI tells from server copy, comments, and docs
-
server: adopt lint block, fix clippy, fmt
-
Format the tree with rustfmt and add the lint + supply-chain gates
-
server: trace custom-page CSS rejections; fix scheduler lock-id comment
-
Remediate audit Run 21 findings across server
-
ux: seal cookie-auth mutations to the CsrfRouter, at-rule + XSS tests
-
ux: friendly errors for validated extractors, widen hide/strobe guards, posture+clamp fixes
-
security: seal git-push CSRF, close 7z/RAR polyglot evasion, exhaustive sanitizer allowlists