-
Drain scheduler on shutdown; escape filename in upload-queue row
-
Gate OTA artifact serving on a malware scan
-
Give scheduler lock a dedicated pool; drain worker quarantine spawns
-
Harden ClamAV to fail-closed; drop dead code; anti-spray rate-limit
-
Seal pricing-format/slug drift and add Cloudflare quarantine cache-purge