Block a user
OIDC login (external identity provider, relying-party flow)
Admin endpoint to trigger visibility transitions (publish/unpublish)
Log server errors on the public API 500 paths (wire tracing in the api crate)
On-write search re-index after catalogue/visibility writes
Enforce required-field completeness when transitioning a record to Public
Admin endpoint to trigger visibility transitions (publish/unpublish)
Wire the Spectrum cataloguing seed into runtime
Consider coalescing core + flexible-field audit entries for a single edit
Batch-fetch field definitions in set_object_fields (avoid N+1) for bulk import
Per-field validation rules (min/max, length, regex) for field definitions
Paginate repository list endpoints before exposing them via the API
Keep
authority.kind CHECK in sync with the AuthorityKind enum