-
Press the buttons on every described screen
-
server: write git notes from the commit page
-
Split the demo-buyer tests out of seed_examples
-
Invite a member to a SyncKit group with an expiring one-use token
-
Split tests/workflows/lists.rs along its own step boundaries
-
Add the unified list, subscription and consent tables
-
Split failure_paths by the dependency that fails, and tighten two assertions
-
Load the real docs in the test harness
-
Make the test mocks fallible, and reach the failure machinery
-
Expose GCK rotation, keyed per generation so history survives it
-
Add CSP violation reporting
-
synckit-server: bill group writes to the admin's slot (Groups phase 2, p2-billing)
-
synckit-server: group-scoped changelog, routes, and its own table (Groups phase 2, p2-changelog)
-
Format the tree with rustfmt and add the lint + supply-chain gates
-
Add multipart blob sessions for SyncKit
-
seed: example-marketplace scaffold + Phase 1 creators & projects
-
server: fix quarantine purge project-cover gap + cover db/scanning (A5, B-Sto1)
-
server: import-job heartbeat + stuck-job reaper, typed status (A5)
-
Remediate audit Run 22 fix-first findings; bump to 0.10.8
-
tests: contract tests for db::users, db::items core, db::synckit_billing + cross-session password revoke
-
server: money-core db-layer contract tests (db::transactions)
-
Test collections and items::bulk db cold spots
-
Test passkeys, ssh_keys, and issues db cold spots
-
Test db money/race cold spots; fix inert cancel_stale_rotation
-
audit Run 15 Phase 3: storage fail-open fixes
-
Harden invites and TOTP replay; add enum-drift guard
-
security: owner-scope blog/item mutations, polyglot + moderation tests
-
payments: seal StripeAccountId + cart ItemType, add DB-layer tests
-
payments: idempotent re-runnable webhook finalize (ultra-fuzz Run 4 M-Pay1, A+)
-
synckit: invalidate sync tokens on device removal + security audit log (ultra-fuzz --deep Security A+)