Fix every audit finding in Tin's repair plan in one bounded pull request, in the site's own framework.
