-
Carry the creator's console theme to the CLI on ssh-key-lookup
-
Exorcise sweep: strip AI tells from server copy, comments, and docs
-
server: adopt lint block, fix clippy, fmt
-
Format the tree with rustfmt and add the lint + supply-chain gates
-
Decompose AppState Phase 3: clear handler holdouts
-
Decompose AppState Phase 2: migrate api/users to slices
-
Group Config and AppState into cohesive sub-structs
-
Remediate audit Run 22 fix-first findings; bump to 0.10.8
-
Payments resilience: fan-out dead-letter, billing guards, inbound idempotency
-
Frontend: kill media-picker XSS; render_string surfaces errors
-
Stop CDN-caching the private feed and couple cache invalidation to deletion (ultra-fuzz Run 12 Security)
-
Run CPU-bound Argon2 off the async runtime (ultra-fuzz Run 10 C1)
-
Surface server error messages on HTMX failures; inline profile errors
-
ux: friendly errors for validated extractors, widen hide/strobe guards, posture+clamp fixes
-
Background Stripe fan-outs and close perf cliffs (ultra-fuzz Run 6 Performance)