- Pass board.name to all invalidateBoardCache calls (permission mutations) - Align integration create invalidation with update/delete - Add initial-fetch-failure test for integration-data-cache - Expand SVG XSS test corpus (javascript:, xlink:href, @import, onbegin) - Forbid <style> tags in SVG sanitizer to prevent CSS injection - Fix duplicate export in packages/common/src/index.ts