-
Render the 2FA errors through the status partial that has CSS
-
Exorcise sweep: strip AI tells from server copy, comments, and docs
-
server: adopt lint block, fix clippy, fmt
-
server: upgrade sha2 to 0.11, sha1 to 0.11, hmac to 0.13
-
Format the tree with rustfmt and add the lint + supply-chain gates
-
Bump rand to 0.10 across MNW crates
-
Decompose AppState Phase 2: migrate remaining api top-level + exports
-
Harden invites and TOTP replay; add enum-drift guard
-
Run CPU-bound Argon2 off the async runtime (ultra-fuzz Run 10 C1)
-
totp: gate confirm on step monotonicity, unifying it with the login replay rule (ultra-fuzz NOTE tail)