-
Describe the SSH-keys tab, behind its own switch
-
Add the wave-2 parity harness and the per-screen conversion switch
-
Name the class of email you cannot opt out of, in code and to the user
-
Denominate every creator sale in the creator's settlement currency
-
Run the sandbox cap tests in every configuration
-
Choose rate limits at runtime, so CI tests the limiter that ships
-
Close seven loose-wire audit findings
-
Require CDN_BASE_URL everywhere so no cover URL can expire
-
server: adopt lint block, fix clippy, fmt
-
Format the tree with rustfmt and add the lint + supply-chain gates
-
Fix discover facet count correctness
-
Add inbound infra-alert ingestion endpoint
-
Decompose AppState Phase 2: finish auth + retire spawn_email!
-
Group Config and AppState into cohesive sub-structs
-
Route mnw-admin CLI moderation through shared due-process service
-
server: split public image content into a separate CDN bucket (S1)
-
security: seal admin gate, close export quarantine bypass, drop legacy sessions (audit Run 20 Phase 2)
-
Cap platform credit as spend-once balance; authenticate inbound sender
-
Scope internal-API identity to a signed SSH-authenticated assertion
-
Consolidate the login gate and type-witness admin writes (ultra-fuzz Run 11 Security)
-
Close security gaps from ultra-fuzz Run 10 (Security axis)
-
Run CPU-bound Argon2 off the async runtime (ultra-fuzz Run 10 C1)