Commit history for src/server/security
- Retry failed recipients instead of dropping them, keep per-IP unsubscribe limit, cursor-based dev mail clear, notify at quota limit on rejection8d09585⌁taigrr committed
- Harden notifications per review: opt-in loopback-only dev mail with gfd harness API, never-throw helpers, idempotent delivery, retry-safe CI fixed detection, safe digests, unbudgeted security notices90e9e27⌁taigrr committed
3aa0ebe⌁
- Notify admins and security managers about secret, push-protection, code scanning, dependency and advisory events6a29b23⌁taigrr committed
- Harden git, LFS, CI, Pages, auth and pull requests against the security review findings, and add a token API for the gfd CLI.4e8720e⌁taigrr committed
- Merge roadmap/security: signatures, secret scanning, code scanning, advisories, dependency graphbad844a⌁taigrr committed