-
Parse the git-over-SSH grammar once, in a crate both doors share
-
server: refuse pushes to the namespaces MNW owns
-
Drop libgit2: the server now links no GPL code
-
Create the bare repo an SSH push is about to write into
-
Give the CLI the repo and key verbs, and stop publishing on push
-
server: adopt lint block, fix clippy, fmt
-
server: derive git authorized_keys path from GIT_HOME
-
Format the tree with rustfmt and add the lint + supply-chain gates
-
Enforce git disk quota on the HTTP push path; validate internal repo_name
-
server: escalate/log the silent error-swallow sites
-
Close security gaps from ultra-fuzz Run 10 (Security axis)
-
perf: set-based sync-log compaction, off-runtime quota walk, bounded scan lookups
-
Harden git SSH limits and expand YARA corpus (ultra-fuzz Run 6 Security)