Sep 20

1. 19:26

   fix(auth): harden password reset identity resolution, email uniqueness, timing protection, and TTL index

   Muhammad Usman
   7ba7585
2. 18:44

   feat(auth): add secure rate-limited password reset flow with Resend email integration

   Muhammad Usman
   e4f2230
3. 18:09

   feat(phase-6): implement atomic find_one_and_update rate limiting and concurrency test⁠

   Muhammad Usman
   b518121
4. 18:00

   fix(phase-6): resolve review findings for rate limiting and quota gating⁠

   Muhammad Usman
   91ab715
5. 17:32

   feat(phase-6): implement rate limiting, daily search quotas, and brute-force lockout

   Muhammad Usman
   a992a58
6. 15:53

   fix(phase-5): enforce credential authentication gates and eliminate hardcoded JWT secrets

   Muhammad Usman
   427a853
7. 15:39

   feat(phase-5): implement cryptographic JWT authentication and dual-key MongoDB user isolation

   Muhammad Usman
   1c2ade2