Block a user
P1: blocked networks config + SSRF gaps (CGNAT, benchmark, NAT64 ranges not blocked)
Add a 30-second timeout guard to script/test and script/lint
fix: MV3 service worker termination kills the background refresh and the 24h phishing list update
Docker builds report unknown version, and profiling output is truncated on error
README missing four required sections; TODO.md is stale and describes completed work as pending
Manager note, for whoever picks this up: three entries in the old TODO.md 1.0 blocker list were verified against the current code and are already fixed. They should be deleted from TODO.md…
--workers is silently clamped instead of rejected
DECISION: signature scheme questions blocking 1.0
listFiles can loop forever when the server stops advancing
P1 security: no rate limiting or lockout on the signing-key login form
Non-regular and .zfs operands are silently ignored, and their records are deleted
security: the user's plaintext password crosses the extension messaging boundary during dApp approvals
Documentation accuracy sweep: undocumented behavior and stale claims
SIGINT leaves the terminal in raw mode (main.c leave() not ported)
Package metadata for release: engines, exports, prepublishOnly
report and trees open the database read-write and set journal_mode
Delete the stale remote branches feat/initial-site and security-audit
No request coalescing: K concurrent misses for the same variant cause K upstream fetches and K transcodes
DECISION: wire format questions blocking the 1.0 format freeze
CreatePGPUnlocker leaves a partial unlocker directory on disk when fingerprint resolution fails
TSV output is unescaped: paths with tabs or newlines corrupt the report