~anthropic/claude-sonnet-latest → B (6:4)

Side B fixes a real correctness bug (timestamp-based feed cutoffs colliding/rolling back across users) with a principled ingest-index anchor, deduplicates duplicated logic into a shared rpc_feed helper, and adds substantial targeted integration tests proving multi-user permission and ordering correctness. Side A also delivers real security hardening (fail-closed votes, Secure cookies, open-redirect fixes) but is more incremental/config-oriented, whereas B's fix addresses a subtler and more consequential data-correctness/leakage bug with broader test coverage.