ai-memory v1.0.0 — GA burn-down

GA readiness: 56.5% — 234 of 414 in-scope issues resolved (211 closed, of which 3 as not planned; 23 fixed on release and open until the tag). Stage gates: 2 of 5 (GOD’s sequence to the tag):The operator tags v1.0.0 only when both are at 100%. Every number here is measured at generation time; the two stages no tool records yet (Phase B, full reviews) are read from a dated evidence file.
Scope = the live ga-blocker freeze (183 open) plus every found-in-testing issue (operator directive 2026-09-27 15:10Z: fix 100%, retest until 100% fixed, document 1:1). Freeze first cut 2026-09-13; the denominator grows when testing files issues, so the percentage can fall as well as rise. Generated from live repository and issue state.
Last updated 2026-09-29T20:32:33Z · release 4fff967ce unmoved since 2026-09-28 · rehearsal 8ee17f7d3
211 closed — shipped (50%)23 fixed on a branch (rehearsal or promoted to release), open until the GA tag (5%)180 outstanding
234 of 414 complete · 56% — fix written, gate-measured and on the branch
211 closed (50%, release-merge progress) · 23 fixed on a branch, open until the GA tag · 180 genuinely outstanding
211closed
23fixed on a branch
0queued for merge
4owned by a lane
88branch only, unreviewed
88not started
9/166found-in-testing closed (157 open)
RUN_DONEgate table
4fff967cerelease tip

Coding agents — who is running where

nodeagentmodelsector of workstate
f2reviewer-f2rClaude Opus 5landing reviewer: reviews every lane before GOD merges; enforces signed commits, Justin identity, Base:/Co-Authored-By trailers and the full-range count gateidle
f2rehearsal-f2hClaude Opus 5builder: found-in-testing fix lanes (operator directive 2026-09-27 15:10Z: fix 100%, retest to 100%, document 1:1)building
f2deputy-tmux22Claude Opus 5.5 (fate_two)DEPUTY / capacity pool: Claude builder subagents plus the Codex pools; found-in-testing fix and retest lanes (MCP lane retest-complete; #4134 awaits GOD ruling); code + security review of all Muse work; TypeSafe Jev inbox triage. The GA tag is operator-gatedbuilding
f2conductorClaude Fable 5.1 (god-zsg)GOD / sole merger. Promotion 4 (PR #3931) merged 2026-09-28; carrier rehearsal/audit-wip accumulates the next promotion (latest: MCP surface fixes #4059 #4061 #4063 #4064 #4065 #4133). Phase B DigitalOcean run (operator-authorised, cap $5) not yet runactive
f2musemuse-spark-1.3-contributor (Muse)builder on graded trial: #4089 (CPU-bound embed/rerank inline on tokio workers in HTTP handlers). Never merges; tmux-22 reviews and approves, GOD mergesactive
f1astra-f1GPT-6 Astra @ high (Codex)quota runs until 2026-09-30: pools on f1 and f2 for builders, QA retests, 3x7/3x3 audits and competitor dossiers. Security-labelled work goes to Claude (OpenAI cyber filter)idle
Node and state are measured live (process working directories on f2, an SSH probe to f1); the sector column is maintained by the conductor and was last reviewed 2026-09-29.
Freeze boundary, current. The freeze zone is closed to ordinary work: an issue enters v1.0.0 scope only if it is a defect in something already in scope, or a regression, and admitting one requires publicly stating what it costs a paying customer. Everything else is v1.0.1 or v1.1.0 and does not hold the release.

One feature admitted, by operator order (2026-09-19): #3806, the pluggable [decision] provider slot — a model class, not a vendor, configured in TOML, served by a hosted API, a customer-hosted endpoint, or an air-gapped local model. The stated cost of NOT admitting it: at GA, contradiction detection turns any preamble or refusal into false, synthesis emits delete verdicts with no probability and no abstain, and the curator consolidates and deletes sources with no judge at all.

The four GA standards — current label state, measured 2026-09-22, not as first written. This block previously read “four standards are in freeze scope and required at 100%”. That is no longer true and is corrected here rather than left standing: #3831 (scripts are Python, production components are Rust) is CLOSED — met; #3824 (only encrypted data in transit anywhere, loopback included), #3830 (encryption setup simple and manageable at every scale) and #3833 (top-shelf encryption documentation) now carry deferred-v1.x and are OUT of v1.0.0 scope. They are named here because a standard that was dropped from the release is a fact a reader is entitled to, and a board that quietly stopped listing them would be the more dishonest instrument. Sixteen issues in total moved from ga-blocker to deferred-v1.x, which is why the denominator fell from 213 to 205 on 2026-09-22 — scope was narrowed by decision, not by measurement drift. (It is 414 today, because testing has since added scope.) What remains in scope on the encryption line is #3709 (zero-config TLS — the easy path) and #3823 (refuse a non-loopback plaintext inference endpoint), both LANDED and promoted to release/v1.0.0 in promotion 3 (2026-09-23); each stays open by ruling until the GA tag.

Found in testing — 9 of 166 closed, 157 open

Operator directive 2026-09-27 15:10Z: every issue identified in testing is fixed, retested until 100% fixed, and documented 1:1. Not every issue has a fix lane yet: each row below shows its measured state (not started, branch only, owned, fixed on a branch), and moves to closed as its fix merges. This series started at 0 closed on 2026-09-27.

Remaining — 203 open (ga-blocker + found-in-testing)

branch only: a branch exists and is not merged (this board does not track its owner)#3152SAL update splits the content patch and the lifecycle transition across two commits on BOTH
branch only: a branch exists and is not merged (this board does not track its owner)#3248[claims-truth] residuals after docs batch 2 (#3169): at-a-glance 'NSA 10 of 10' card body, f
branch only: a branch exists and is not merged (this board does not track its owner)#3500v97 upgrade: name the offending agent when the legacy agent_pubkey backfill hits the canonic
branch only: a branch exists and is not merged (this board does not track its owner)#3545[bug] wrap codex default --system is rejected by Codex CLI >= 0.153 — fail closed outside th
branch only: a branch exists and is not merged (this board does not track its owner)#3619[asi-hard][claims] FED_QUARANTINE_UNATTRIBUTED=TRUE meets the asi-hard floor (case-insensiti
branch only: a branch exists and is not merged (this board does not track its owner)#3637[review] adversarial code + security review of the A2A wake plane (rust-a2a implementation)
branch only: a branch exists and is not merged (this board does not track its owner)#3651[observability][HIGH] Logging failures can silently degrade boot and runtime delivery
branch only: a branch exists and is not merged (this board does not track its owner)#3660[observability][HIGH] Engaged read decisions can lose durable audit evidence despite DLQ-bac
on release/v1.0.0 (promoted); open until the GA tag#3709[GA][ux] make encrypted-in-transit the easy path — zero-config TLS on first boot, one comman
branch only: a branch exists and is not merged (this board does not track its owner)#3729federation: an EXPIRED local lease still blocks a peer's signed action transition (#3367 cla
on release/v1.0.0 (promoted); open until the GA tag#3745webhook dispatcher stalls under load: workers park on a futex before/after the DLQ bookkeepi
owned by a lane#3806[v1.0.0-GA][enterprise] `[decision]` provider slot: a pluggable structured-decision model cl
on release/v1.0.0 (promoted); open until the GA tag#3807[ga-blocker][docs] `src/autonomy.rs:55` claims the destructive consolidation merge is gated
on release/v1.0.0 (promoted); open until the GA tag#3818[data-integrity] four MCP tools on the read-only inventory write (lease sweep, signed_events
on release/v1.0.0 (promoted); open until the GA tag#3822[security][config] inference egress has no "corporate internal network only" posture — the m
on release/v1.0.0 (promoted); open until the GA tag#3823[security] a non-loopback `http://` inference endpoint is accepted, and two tests assert it
owned by a lane#3826[test] the `[decision]` structural ratchet is red on the stacked integration base — the allo
branch only: a branch exists and is not merged (this board does not track its owner)#3838[deploy] docker-compose.batman-active.yml cannot start: serve --bind is not a flag, image pi
on release/v1.0.0 (promoted); open until the GA tag#3872landing chain measures the rehearsal tip; CI measures the pull_request merge commit — gate t
on release/v1.0.0 (promoted); open until the GA tag#3883AGE: project_link_into_age swallows an orphaned-graph "already exists" on the WRITE path — T
branch only: a branch exists and is not merged (this board does not track its owner)#3887[data-integrity][postgres] a healthy-but-STALE AGE returns Ok(empty), so no error-based fall
on release/v1.0.0 (promoted); open until the GA tag#3901[federation] attested cross-id title merge dequarantines a DIFFERENT local row: dequarantine
on release/v1.0.0 (promoted); open until the GA tag#3922docs(reviews): 3x7 adversarial vote — Boids emergence vs ai-memory as endpoint memory for ag
on release/v1.0.0 (promoted); open until the GA tag#3924[cli][postgres] `ai-memory swarm-rewind` on a PG node has no refuse_pg_store guard: it opens
on release/v1.0.0 (promoted); open until the GA tag#3925[docs-drift][postgres] src/store/postgres.rs:8211-8214 claims "the supersedes path, #3324, s
on release/v1.0.0 (promoted); open until the GA tag#3926[docs][GA notes] #3266's "fully in the v1.0.0 GA release" is false on Postgres: #3322 swarm_
on release/v1.0.0 (promoted); open until the GA tag#3927[postgres][parity] PG recall_hybrid drops the contradiction soft-loser down-weight that sear
on release/v1.0.0 (promoted); open until the GA tag#3928[federation][docs] private-by-default rows (incl. inbox rows) are push-replicated to every p
on release/v1.0.0 (promoted); open until the GA tag#3934record_stop_structural_b7: is_fn_start cannot see pub(super)/pub(in ..)/pub(self) fns — bodi
on release/v1.0.0 (promoted); open until the GA tag#3937CI red on 3c00cd301: tests/storage_chain_fbl.rs fbl34_{touch,fold}_decade_bump_caps_at_acces
owned by a lane#3938CI flake on f1-macos-fed-2: config1_full_surface_attested_nhi_e2e "daemon never became ready
on release/v1.0.0 (promoted); open until the GA tag#3941tests/k7_hmac.rs: latent race — sibling cells set the process-global server-wide HMAC secret
on release/v1.0.0 (promoted); open until the GA tag#3942record_stop_structural_b7: write_sql_line is single-line conjunctive (UPDATE and SET on the
on release/v1.0.0 (promoted); open until the GA tag#3943for_admin_checked(<caller>, true) with a hard-coded literal disarms the type-level admin-gat
on release/v1.0.0 (promoted); open until the GA tag#3946[postgres][lineage] lineage walk silently misses an edge whose AGE projection is still pendi
on release/v1.0.0 (promoted); open until the GA tag#3953[security][postgres] ownership check SQL_SELECT_OWNER_AGENT_ID_BY_ID is FOR UPDATE on the PO
owned by a lane#3962[federation][recall] title-slot merge where the LOCAL row wins still writes the SENDER's shi
branch only: a branch exists and is not merged (this board does not track its owner)#3963sqlite federation receive refunds a quota dimension it never charged — refund_op(QuotaOp::Me
branch only: a branch exists and is not merged (this board does not track its owner)#3964coverage: the per-module threshold gate never checks 325 of 504 src files — 76 are below the
branch only: a branch exists and is not merged (this board does not track its owner)#3965[security][gate] C8 for_admin allowlist is file:literal-scoped, so ADDITIONAL privacy-bypass
branch only: a branch exists and is not merged (this board does not track its owner)#3979webhook deliveries still queued for a dispatch permit at shutdown or crash lose their audit
found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner)#3984[ci][gate] check-required-contexts-live.sh compare_files runs comm without LC_ALL=C — can DR
found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner)#3985[docs][ci] not-required ledger instructs "mirror FIRST" (header + 4 entries) — the order the
found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner)#3986[federation] transition funnels map a lease-read ERROR to "no lease" (lease_get(..).ok().fla
found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner)#3987[docs] CLAUDE.md env row 148 says federation::receive_auth is sal-gated — it is not (KNOBS a
found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner)#3988Promotion 4 red: pg serve never becomes healthy (signed_events_fresh_store_signs_3354_pg) on
found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner)#3989[found-in-testing] README still promises access-driven mid→long auto-promotion and +1 priori
found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner)#3990[found-in-testing] docs/telemetry.md promises tracing never carries memory payload, but thre
found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner)#3991[found-in-testing] docs/telemetry.md says the HuggingFace model fetch is off by default; the
found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner)#3992[found-in-testing] mobile-iot-deployment.md presents 10k–1M resource figures and Pixel batte
found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner)#3993[found-in-testing] at-a-glance.html attributes its gauges to a 1,000-memory `ai-memory bench
found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner)#3994[found-in-testing] at-a-glance.html says every destructive operation has an undo path and th
found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner)#3995[found-in-testing] enterprise-deployment.md says the S76 gate guarantees AGE ≥30% faster tha
found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner)#3996[found-in-testing] INSTALL.md says pre-built binaries are default-feature builds without mig
found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner)#3997[found-in-testing] README says ai-memory uses zero context tokens until memory_recall; the t
found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner)#3998[found-in-testing] production-deployment.md says the CLI never auto-generates an Ed25519 key
found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner)#3999[found-in-testing] enterprise-deployment.md attributes a p50/p95/p99 latency table to the LA
found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner)#4000[found-in-testing] audit-trail-coverage.md claims every successful write is chain-logged wit
found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner)#4001[found-in-testing] Compliance docs and the boot log call the key-refresh interval the upper
found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner)#4002[found-in-testing] NSA-CSI mapping tells clients to TOFU-pin the identity signature, but the
found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner)#4003[found-in-testing] SECURITY.md says federation transport is mutually authenticated TLS; mTLS
found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner)#4004[found-in-testing] CLI_REFERENCE describes --quorum-writes as 'W (peer acks required)'; W co
found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner)#4005[found-in-testing] memory_subscribe schema says 'http only for loopback' and 'Omit for unsig
found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner)#4006[found-in-testing] `serve --help` says no TLS flags = plain HTTP, and CLI_REFERENCE/SECURITY
found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner)#4007[found-in-testing] CLI_REFERENCE says an invalid tier is refused before the database is open
found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner)#4008[found-in-testing] v1.0.0 release notes say cert-postgres-age.yml builds and runs the deploy
found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner)#4009[found-in-testing] v1.0.0 release notes say the abort-after-commit harness proves writes sur
found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner)#4010[found-in-testing] Postgres swarm_rewind locks the root before its id-sorted descendants whi
found-in-testing · not started#4011[found-in-testing] #3806 decision client can take confidence from a token outside the verdic
found-in-testing · not started#4012[found-in-testing] #3806 decision breaker: a stale in-flight success resets the half-open st
found-in-testing · not started#4013[found-in-testing] #3806 source census test is red at the landing tip: src/curator/mod.rs na
found-in-testing · not started#4014boot --cwd changes the whole process current directory to infer a namespace, and ignores a f
found-in-testing · not started#4015Lib test fixture roots resolve .local-runs from the mutable process cwd; 4 recover::tests ce
found-in-testing · not started#4016Test cwd writers use no shared lock: cli::helpers has a private cwd_lock that excludes nobod
found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner)#4017[found-in-testing] federation receive: containment release trusts same-ID as proof the store
found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner)#4018[found-in-testing] internal-only egress: admission host parser can disagree with the HTTP cl
found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner)#4020[security][gate] C8 for_admin gate is text-matched: a renaming import (CallerContext as X) o
found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner)#4021[audit] audit verify does not detect a sequence gap, so events lost after boot leave a trail
found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner)#4022[docs] storage::recall rustdoc says 'touch + auto-promote' — recall is pure (#1953) and auto
found-in-testing · not started#4023[found-in-testing] Postgres federation receive checks peer namespace scope on a pre-read, th
found-in-testing · not started#4024[found-in-testing] Federation transition receive burns the operation nonce before the CAS an
found-in-testing · not started#4025[found-in-testing] Federated pending-action approval commits before execution; a failed or l
found-in-testing · not started#4026[found-in-testing] Postgres federation receive charges cumulative storage quota for a duplic
found-in-testing · not started#4027[found-in-testing] Postgres signal receive redacts before the forged-signature check, so wit
found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner)#4028[found-in-testing] Postgres /sync/push reports the sender as receiver_agent_id, and several
found-in-testing · not started#4029[found-in-testing] Federation inbound apply checks the forget tombstone outside its write tr
found-in-testing · not started#4030[found-in-testing] CRDT merge selects content by parsed instant but the output updated_at by
found-in-testing · not started#4031[found-in-testing] CRDT deep merge is order-dependent: a retained metadata key or optional f
found-in-testing · not started#4032[found-in-testing] CRDT merge persists tag/metadata unions larger than the receiver's own va
found-in-testing · not started#4033[found-in-testing] Outbound federation push (per-row, DLQ replay, bulk) buffers peer respons
found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner)#4034[found-in-testing] SQLite update resolves omitted fields before taking the write lock, so an
found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner)#4035[found-in-testing] SQLite federation merge replaces the single pre-merge recovery snapshot e
found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner)#4036[found-in-testing] SQLite FTS deep integrity check omits rank=1, so it never compares the in
found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner)#4037[found-in-testing] Postgres run_gc(archive=true) copies one expiry snapshot then deletes by
found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner)#4038[found-in-testing] Postgres duplicate link apply is a relational no-op (ON CONFLICT DO NOTHI
found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner)#4039[found-in-testing] Postgres AGE outbox drainer checks link existence without a row lock, so
found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner)#4040[found-in-testing] Postgres embedding-dimension migration counts at-risk vectors outside its
found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner)#4041[found-in-testing] Postgres pool max_connections=1 is accepted, but bootstrap holds the only
found-in-testing · not started#4042[found-in-testing] Governance glob matcher keeps only the last wildcard checkpoint, so patte
found-in-testing · not started#4043[found-in-testing] SQLite namespace-standard lookup turns read errors into NoPolicy, so a po
found-in-testing · not started#4044[found-in-testing] Agent-action check reads the policy version after evaluation, so a concur
found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner)#4045[found-in-testing] Curator consolidation summarizes and logs stale source snapshots, then co
found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner)#4046[found-in-testing] Autonomous consolidation accepts an empty or whitespace LLM summary and r
found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner)#4047[found-in-testing] OllamaClient circuit breaker promises to open after 3 consecutive failure
found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner)#4048[found-in-testing] #3822 residual: model-pull clients are built without the internal-only DN
found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner)#4049[found-in-testing] #3883 residual: schema-init reports success over an orphaned AGE graph sc
found-in-testing · not started#4050[found-in-testing] #3925 residual: get_any docstring again says no Postgres path writes cont
found-in-testing · not started#4051[found-in-testing] #3926 residual: README v1.0.0 introduction still says not on Postgres and
found-in-testing · not started#4052[found-in-testing] #3934 residual: fn_body_has_gate parity slicer credits a following functi
found-in-testing · not started#4053[found-in-testing] #3953 residual: Postgres update applies the lifecycle change after the ow
found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner)#4054[security][gate] production_lines skips any file whose NAME contains a test/tests segment —
found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner)#4056[found-in-testing] Postgres HTTP notify ignores the configured [ttl] tier override and persi
found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner)#4057[found-in-testing] wake-hub stale-socket probe is a blocking Unix connect with no deadline,
found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner)#4058[found-in-testing] inbox --wait: an empty hub welcome calls note_read() without reading, res
found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner)#4060[found-in-testing] Federation pullers treat an explicit next_since: null as a legacy absent
found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner)#4062[found-in-testing] Graceful serve shutdown certifies (final witness + WAL checkpoint) while
found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner)#4066[found-in-testing] A stale enrolled-key refresh can reinstall a revoked API key after HTTP r
found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner)#4067[found-in-testing] serve --catchup-interval-secs=0 stamps the erasure-outbox drainability ma
found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner)#4068[found-in-testing] Authenticated monitoring routes check credentials outside the shared auth
found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner)#4069[found-in-testing] Webhook fan-out never checks the subscriber can read the source memory, s
found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner)#4070[found-in-testing] PostgreSQL serve shutdown force-emits the final witness and checkpoint ag
found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner)#4071[found-in-testing] Inbox SSE frames carry the process-wide wake seq, exposing other recipien
found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner)#4072[found-in-testing] HTTP serve drains gracefully only on SIGINT; SIGTERM (container image def
found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner)#4073[found-in-testing] Approval handler rustdoc still specifies the old <timestamp>.<body> HMAC
found-in-testing · not started#4074[found-in-testing] hmac_secret boot validator panics on non-ASCII input (byte-pair slicing i
found-in-testing · not started#4075[found-in-testing] Webhook DNS pinning resolves implicit-port https:// hostnames to port 80
found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner)#4076[found-in-testing] agent_notified webhook payload carries two correlation_id keys (delivery
found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner)#4077[found-in-testing] Plan-C documented upgrade recipe runs 'docker compose down -v', deleting
found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner)#4078[found-in-testing] SQLite upgrades from v96-v99 drop the embed_skip clear triggers and never
found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner)#4079[found-in-testing] Postgres unsubscribe deletes only the local subscription row; the peer re
found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner)#4080[found-in-testing] Shipped backup/sync/curator systemd units lack the main unit's AI_MEMORY_
found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner)#4081[found-in-testing] Postgres GET /subscriptions hardcodes dispatch_count/failure_count to 0;
found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner)#4082[found-in-testing] install.sh copies directly over the installed binary with no staging or a
found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner)#4083[found-in-testing] Webhook module docs advertise an allow_private_networks override and raw-
found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner)#4084[found-in-testing] packaging/systemd README says the Debian and COPR packages ship the syste
found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner)#4085Flaky lib test: mcp::archive tests read AI_MEMORY_AGENT_ID unguarded and pick up another tes
found-in-testing · not started#4086[security][audit] events lost at the tail before a restart are invisible: init resumes from
found-in-testing · on release/v1.0.0 (promoted); open until the GA tag#4088Flaky lib test: mcp::tests::tools_call_emits_span_* capture an empty trace (tracing callsite
found-in-testing · not started#4089[found-in-testing] HTTP handlers run CPU-bound embed/rerank inline on tokio workers (bulk cr
found-in-testing · not started#4090daemon_runtime issue_1579_a3_boot_log_redacts_store_url_password captures tracing in the sha
found-in-testing · not started#4091[data-integrity] HTTP consolidate replaces sources with a content-free placeholder when the
not started#4116[found-in-review] governance escalate producer writes the pending on a second connection whi
branch only: a branch exists and is not merged (this board does not track its owner)#4120[found-in-review] wake-hub stale-socket probe: on macOS/BSD a full accept queue answers ECON
found-in-testing · not started#4121[found-in-testing] ai-memory doctor LLM/embedding reachability probes bypass the inference-e
found-in-testing · not started#4122[found-in-testing] ai-memory reembed bypasses inference-egress admission and the pin: sends
found-in-testing · not started#4123[found-in-testing] HF Hub model-weight downloads (local embedder + cross-encoder) are outsid
branch only: a branch exists and is not merged (this board does not track its owner)#4124[found-in-review] recall cost metering silently drops counter updates on SQLITE_BUSY (debug-
not started#4125[found-in-review] wake-hub seq_high_watermark is the host-wide WAKE_SEQ, the same cross-tena
found-in-testing · not started#4126[ci][flaky] tests/common free_port TOCTOU: a spawned serve loses its port (EADDRINUSE, exit
not started#4132MCP tools/list ships JSON-Schema $ref + definitions (3 in full, 1 in core); gateways that do
found-in-testing · not started#4134[found-in-testing] storage decode: an unknown/corrupt lifecycle_state is read as Open, so a
found-in-testing · not started#4139[docs] access-driven mid->long auto-promotion + priority ladder still documented in 10 place
found-in-testing · not started#4142[docs] CLAUDE.md says c8-precheck.yml has TWENTY-SIX jobs; it has 33 (9 gates unnamed in the
found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner)#4145[security][gate] MCP transport-isolation gate skips any src/mcp file whose name contains "te
found-in-testing · not started#4146v1 CLI import probes the forget tombstone outside the insert's transaction, so a concurrent
found-in-testing · not started#4147[found-in-testing][security][sqlite] #3957 residual: HTTP and MCP update/delete sqlite funne
found-in-testing · not started#4148[security][gate] B7 record-stop scanner: #3942 continuation join swallows a fn signature aft
found-in-testing · not started#4150[security][gate] C8 #3943 for_admin_checked literal detector misses constant-true arguments
found-in-testing · not started#4151[security][gate] #3872 promotion-geometry gate hardcodes release/v1.0.0; every promotion PR
found-in-testing · not started#4152[gate] #3872 promotion-ancestry steps run first in required-contexts-gate; a #3872 failure b
found-in-testing · not started#4153[found-in-testing] Postgres DELETE /api/v1/memories/{id} never fans the deletion out to fede
found-in-testing · not started#4154[security] egress refusal records the raw base_url, so credentials embedded in an LLM/embedd
found-in-testing · not started#4155decontaminate.rs:147 duplicates the SQL literal that SELECT_LIFECYCLE_META_BY_ID_SQL already
found-in-testing · not started#4156insert_if_newer lifecycle comment says remote system-only states are 'never adopted', but on
found-in-testing · not started#4157swarm-rewind structural cell stops at the first ')' and misses nested or multi-line for_admi
found-in-testing · not started#4158no test pins that every inbound federation funnel normalises the node-local metadata overlay
found-in-testing · not started#4159kg_age_orphan_graph_3883 test double-closes a pool, and its comment calls the no-op close th
found-in-testing · not started#4160no structural pin asserts that no Postgres pool stays open across the AGE orphan/heal catalo
found-in-testing · not started#4161coverage/thresholds.toml says the metrics.rs exception is documented in coverage/policy.md;
found-in-testing · not started#4162foreign-text-to-caller pending ledger carries 3 stale entries whose issues (#3707, #3766) ar
found-in-testing · not started#4163US agent-memory market audit names operator host paths (/home/fate_two, /mnt/t9) in 4 method
found-in-testing · not started#4164config/shape.rs doc says the asi-hard pin set is 28 knobs; PINNED_KNOB_COUNT is 30
found-in-testing · not started#4165webhook dispatch: DNS_SSRF_REJECTED lumps a permanent address-class refusal with a transient
found-in-testing · not started#4166three serve-spawning posture tests use env_clear without AI_MEMORY_EMBED_OFFLINE while waiti
found-in-testing · not started#4167config_auto_tag_endpoint test asserts !contains("IGNORED"), which also matches the macOS Lib
found-in-testing · not started#4168SECURITY.md 'Pinned so it cannot decay' overstates the MCP transport-isolation gate: it sees
found-in-testing · not started#4169SECURITY.md 'The one documented exception' omits the inference clients and the wake UDS clie
found-in-testing · not started#4170QUAL-7 legacy error-type ceiling sits exactly at its limit (48) and the migrate-then-ratchet
found-in-testing · not started#4171routine materialization returns and persists raw database driver error text to the MCP calle
found-in-testing · not started#4172[found-in-testing] Local pending-action approve surfaces (HTTP, MCP, CLI) commit the approva
found-in-testing · not started#4173[#3806] synthesis delete arm under fallback='refuse' only WARNs and returns NoOp; the caller
found-in-testing · not started#4174[#3806] curator Pass-1 dry run still calls the generative summariser (summarize_memories) be
found-in-testing · not started#4175[#3806] decision_seams: stale NoDecider doc, LowConfidence Display always prints the consoli
found-in-testing · not started#4176[#3806] no test pins the chat decision client's {content:null, refusal:""} → Unavailable pat
found-in-testing · not started#4177[#3806] 127.0.0.2 egress-transport cell skips off Linux yet reports ok; CHANGELOG claims it
found-in-testing · not started#4178[#3806] mod review_sync_probe_cells documented 'not for landing' is in code that is landing
found-in-testing · not started#4179[#3806] merge-judge census pins cut each file at the first 'mod tests', so a caller below an
found-in-testing · not started#4180wake_hub snapshot_publish F1 owner-check test skips (eprintln) when euid==0, so the planned
found-in-testing · not started#4181docs/telemetry.md claims the content-leak census fails CI on any new call site; it only sees
found-in-testing · not started#4182B7 scanner module doc does not name its known limits (gate calls in dead closures/branches c
found-in-testing · not started#4183[#4045] consolidate_with_expected_versions returns sqlite VersionConflict but postgres Store
found-in-testing · not started#4184[#4010] pg test's DROP TRIGGER/FUNCTION cleanup only runs on success, so a failing run leave
found-in-testing · not started#4185[#4048] model_pull_egress_pin test panics on hosts with IPv6 disabled (TcpListener::bind("[:
found-in-testing · not started#4186[#3979] boot WARN's started_in_flight count treats claimed-but-unwritten workers as having a
found-in-testing · not started#4187[security] swarm rewind computes the descendant set outside the stamping transaction on both
found-in-testing · not started#4188postgres delete: the inbox retain-vs-erase routing reads the row's namespace on the pool out
found-in-testing · not started#4189postgres delete: a non-recipient's refusal on an inbox row can carry the archive path's erro
found-in-testing · not started#4190[security][audit] audit::init swallows a chain-tail read error and silently restarts the cha
found-in-testing · not started#4191[security][audit] audit verify never checks the head of a genesis-anchored trail: events los
found-in-testing · not started#4192[security][#3806] [decision] sends the vendor alias API key to any base_url, ahead of the se
found-in-testing · not started#4193[security][#3806] decision client honours HTTP(S)_PROXY/ALL_PROXY and follows redirects outs
found-in-testing · not started#4194[security] ResolvedLlm API key copies are never zeroized; resolve_llm runs 3x per boot/reloa
found-in-testing · not started#4195[security][#3806] decision_clients::construct and OpenAiCompatibleDecider::new are pub and a

Deferred — named target, does not block the first customer

#3701[GA][monetization] no entitlement, licensing or support-tier mechanism exists — there is not
#3714[GA][ux] one-to-many configuration: deployment shape as the primary input, with init/plan/ap
#3715[GA][enterprise] long-term configuration manageability — unknown keys are silently ignored,
#3716[GA][enterprise] professionalize configurability — 178 settings is the complexity: derive mo
#3717[GA][enterprise] make ALL encryption manageable — at-rest on by shape, one command for a coh
#3706[v1.1.0] end-to-end encryption of memory content — a TLS-terminating intermediary or federat
Gate: Conductor landing gate on ceb199f0e — 49 rows, 1 non-green, RUN_DONE · quiet 5770 min · 0 processes · disk 343G / 479G.