Node and state are measured live (process working directories on f2, an SSH probe to f1); the sector column is maintained by the conductor and was last reviewed 2026-09-29.
Operator directive 2026-09-27 15:10Z: every issue identified in testing is fixed, retested until 100% fixed, and documented 1:1. Not every issue has a fix lane yet: each row below shows its measured state (not started, branch only, owned, fixed on a branch), and moves to closed as its fix merges. This series started at 0 closed on 2026-09-27.
| not started | #2224 | Erasure cold tier (#2064): quarantined-purge content has no operator inspect/purge verb (R6) |
| not started | #2238 | Cross-backend divergence: sqlite consolidate runs the C->source derived_from edge through th |
| not started | #2420 | [#2390 follow-up] Namespace-qualified `required_events` — the mandatory-PRESENCE gate is sti |
| not started | #2426 | Hook config accepts a subscription to a never-dispatched event — PreArchive gates a destruct |
| not started | #2462 | v54 tier-default-expiry backfill writes a non-canonical `+00:00` rendering — safe only becau |
| not started | #2463 | TTL-extension MAX() floors cannot self-heal a legacy non-UTC expires_at — a stale offset ren |
| not started | #2553 | [#2445 residual] the schema-downgrade guard is OPEN-TIME only — a live process keeps writing |
| not started | #2554 | [#2445 residual] observed > tip is NECESSARY but not SUFFICIENT — a crashed sqlite ladder le |
| not started | #2565 | [#2445 residual] the pre-migration snapshot has no manifest, so the documented rollback is o |
| not started | #2573 | [data-honesty] the HTTP admin export sibling has no withhold accounting — drift with the CLI |
| not started | #2631 | v88 CREATE INDEX CONCURRENTLY runs on the boot path under the cluster-wide advisory lock wit |
| not started | #2671 | [federation][scale] the catch-up loop has no jitter — a fleet-wide upgrade or restart synchr |
| not started | #3034 | ai-memory mine default --on-conflict=version duplicates the entire corpus on every re-mine ( |
| not started | #3095 | Pin AI_MEMORY_FED_ALLOW_UNENROLLED_PEERS in asi-hard KNOBS — companion permissive hatch to t |
| not started | #3154 | curator reflection pass has no idempotence — a hot cluster mints a fresh Reflection every sw |
| not started | #3170 | curator: SAL ConsolidationPass runs unconditionally after the autonomy passes — ignores roll |
| not started | #3186 | [data-integrity][wire] MemoryStore::list_archived emits tags as a JSON array on sqlite but a |
| not started | #3187 | [data-integrity] SqliteStore::set_row_metadata writes unvalidated TEXT into memories.metadat |
| not started | #3207 | [data-integrity] pg sweep_pending_action_timeouts emits no pending_action.timed_out audit ro |
| not started | #3209 | [pg-parity][schema] agent_quotas PRIMARY KEY is (agent_id, namespace) on SQLite since v50/#1 |
| branch only: a branch exists and is not merged (this board does not track its owner) | #3248 | [claims-truth] residuals after docs batch 2 (#3169): at-a-glance 'NSA 10 of 10' card body, f |
| not started | #3328 | Minor: by-id memory projection returns null title/content to author (recall works); stale -- |
| not started | #3350 | check-duplicate silently returns candidates_scanned=0 / is_duplicate=false for a short candi |
| not started | #3368 | memory_checkpoint_resolve: resolved_by is not shape-validated (control chars → audit/log inj |
| not started | #3369 | memory_routine_create parameters are signed into the freeze attestation but never enforced o |
| not started | #3376 | Forensic 'allow' decision rows emitted before validation: memory_skill_promote_from_reflecti |
| not started | #3391 | memory_atomise force_re_atomise accumulates instead of replacing — 7 atoms → force → 14 atom |
| not started | #3415 | HTTP low cluster: POST /gc ignores dry_run silently (MCP twin honours it); 422 body-deserial |
| not started | #3437 | rules keygen --out <path> writes a keypair layout the operator-key loader rejects; agents bi |
| not started | #3451 | memory_recall/list/session_start: an unknown but well-formed `format` silently renders JSON |
| branch only: a branch exists and is not merged (this board does not track its owner) | #3500 | v97 upgrade: name the offending agent when the legacy agent_pubkey backfill hits the canonic |
| not started | #3501 | cert §7 re-validation and re-issue after #3464 (federation receive paths changed; certificat |
| not started | #3509 | Load-sensitive tests fail on a saturated gate host: auto_atomise curator-fire count and L4 c |
| branch only: a branch exists and is not merged (this board does not track its owner) | #3545 | [bug] wrap codex default --system is rejected by Codex CLI >= 0.153 — fail closed outside th |
| not started | #3590 | SIGSEGV in tests/crypto_erase_1956 on ubuntu-latest (CI attempt 2 on 6082af8a) — no local re |
| not started | #3606 | [cli] AI_MEMORY_NO_CONFIG=1 still CREATES ~/.config/ai-memory/config.toml when none exists ( |
| not started | #3610 | [test-hygiene] check-cert-leg-nonvacuity.sh counts a PASSING `storage::embed_skip::tests::*` |
| not started | #3613 | ci: reproducible release builds — SOURCE_DATE_EPOCH + two-build byte-identity proof (#3546 D |
| not started | #3617 | tests: #3178 pg audit-leaf pin counts memory_link.invalidated by event_type only — races its |
| not started | #3618 | [asi-hard][claims] REQUIRE_AGENT_ATTESTATION=yes meets the asi-hard floor (is_truthy) but th |
| branch only: a branch exists and is not merged (this board does not track its owner) | #3619 | [asi-hard][claims] FED_QUARANTINE_UNATTRIBUTED=TRUE meets the asi-hard floor (case-insensiti |
| not started | #3620 | [claims] AI_MEMORY_PASSPHRASE_FILE_ALLOW_LAX_PERMS has two readers with two grammars (1|true |
| not started | #3632 | #3171 handler-param scanner is blind to params reads routed through helpers/consts outside s |
| queued for merge | #3633 | check-bootstrap-cert-gate.sh ignores CARGO_TARGET_DIR: builds the binary, then looks in $REP |
| not started | #3634 | doctor_wake_hub socket tests fail with 'path must be shorter than SUN_LEN' when TMPDIR is lo |
| not started | #3635 | docs(wake-hub): two deployment findings from the #3630 dogfood — store directory must be own |
| branch only: a branch exists and is not merged (this board does not track its owner) | #3637 | [review] adversarial code + security review of the A2A wake plane (rust-a2a implementation) |
| branch only: a branch exists and is not merged (this board does not track its owner) | #3651 | [observability][HIGH] Logging failures can silently degrade boot and runtime delivery |
| not started | #3652 | [observability][HIGH] File logging and forensic sinks lack an OS rotation and bounded retent |
| not started | #3653 | [observability][HIGH] Request and storage metrics cannot measure write health or complete re |
| not started | #3656 | [observability][HIGH] Remote doctor omits the health probe and core fleet diagnostics |
| not started | #3657 | [observability][HIGH] Wake counters exist in memory but are not emitted by the shipped daemo |
| not started | #3658 | [observability][HIGH] Federation DLQ drops bookkeeping errors at the trait boundary |
| branch only: a branch exists and is not merged (this board does not track its owner) | #3660 | [observability][HIGH] Engaged read decisions can lose durable audit evidence despite DLQ-bac |
| not started | #3661 | [observability][HIGH] Unverified restore evidence is confined to a best-effort forensic file |
| not started | #3666 | [observability][MEDIUM] Operator documentation lacks one complete observability and incident |
| not started | #3669 | [observability] Test fixtures leak SQLite temp databases into /tmp (564k files, 291 GB on th |
| not started | #3670 | [receipts] A durability-observation failure turns a completed write into a 500 |
| not started | #3672 | [auth] Context-free MemoryStore mutations accept no caller, so no credential restriction can |
| not started | #3676 | [observability] postgres_gate logs the raw request path, so a captured memory id reaches the |
| not started | #3679 | bulk_federation_fanout: a fanout task JoinError loses the memory id and never reaches the bu |
| not started | #3680 | [test-infra][macOS] stale split-debuginfo objects in target/debug/deps make every reqwest Cl |
| not started | #3683 | [observability] ai_memory_memories_refreshed_at_seconds exports 0 = never (absent-is-not-zer |
| not started | #3719 | docs: CLAUDE.md says c8-precheck.yml has TWENTY-TWO jobs; it has 24 (const-name-literal-gate |
| not started | #3721 | test hygiene: storage::tests::schema_v15_existing_links_get_valid_from_backfilled leaks -wal |
| not started | #3726 | ci: 228 of 844 integration test files (27%) report 'ok. 0 passed' on a default-feature build |
| not started | #3727 | test-quality: ledger/audit assertions over a filter that can never match (the #3354 pg-twin |
| branch only: a branch exists and is not merged (this board does not track its owner) | #3729 | federation: an EXPIRED local lease still blocks a peer's signed action transition (#3367 cla |
| not started | #3732 | admin HTTP POST /api/v1/agents still overwrites an existing agent_type/capabilities silently |
| not started | #3735 | v1.0.1: make the webhook delivery-audit status write RELIABLE (retry/spool the ack|failed tr |
| not started | #3741 | keys prune reaps the #3354-generated ledger signing key (fixed on #3354-v3); v1.0.1: protect |
| not started | #3742 | LLM/embeddings request URLs are built by string concat — a base_url with a query string (Azu |
| on release/v1.0.0 (promoted); open until the GA tag | #3745 | webhook dispatcher stalls under load: workers park on a futex before/after the DLQ bookkeepi |
| not started | #3746 | [docs][api] eight tools/list parameter titles are truncated doc-comment fragments (7x #3171, |
| not started | #3747 | [federation] cross-PUSH out-of-order delivery still folds a new memory into a source being c |
| not started | #3757 | credential_to_sink_3711 DLQ cell polls 30 s while its comment promises 120 s — 0 of 4 rows u |
| not started | #3771 | infra/lan-parity-test/provision-tls.sh mints ed25519 CA + server keys; the psql verify-full |
| not started | #3773 | Gate 7 (check-foreign-text-to-caller.py) cannot see a resolved path once it is a callee PARA |
| not started | #3792 | postgres execute_pending_action has no reflect arm: an approved write-level reflect pending |
| owned by a lane | #3806 | [v1.0.0-GA][enterprise] `[decision]` provider slot: a pluggable structured-decision model cl |
| not started | #3812 | [v1.0.x][security][sdk-ts] wake.ts readOwnerOnly Windows fallback checks the path and then r |
| owned by a lane | #3826 | [test] the `[decision]` structural ratchet is red on the stacked integration base — the allo |
| branch only: a branch exists and is not merged (this board does not track its owner) | #3838 | [deploy] docker-compose.batman-active.yml cannot start: serve --bind is not a flag, image pi |
| not started | #3839 | [scripts] ops_producer.py and continuity-cycle.py cannot reach a TLS-only daemon: plaintext |
| not started | #3840 | [sdk/python] verify=False is documented as never-pass and accepted by the constructor; ruff |
| not started | #3855 | [test] a dropped wiremock MockServer does NOT free its port — every absence assertion built |
| not started | #3856 | [reliability] a deferred-audit spool thread outlives its storage and blocks forever — cargo |
| not started | #3862 | test_key_dir sandbox leaks one 0700 key directory per test process (static OnceLock<TempDir> |
| not started | #3871 | chain READERS rule blind to bare top-level filenames and the dot-join manifest-dir idiom (hi |
| not started | #3874 | namespace-standard wire shape: #3400 normalised GET only — postgres SET/CLEAR/inherit-GET st |
| not started | #3878 | [mcp][ux] record-stop refusal discards the typed RECORD_STOPPED code into a generic -32603 — |
| not started | #3879 | [coordination] a record-stop longer than the 60s lease TTL expires EVERY lease in the fleet, |
| not started | #3880 | CI: Linux wake-hub overflow test fails with BrokenPipe writing sender frame |
| not started | #3884 | [ci][security-signal] CodeQL is permanently red on promotion: its baseline is 51 critical al |
| not started | #3886 | [ci][flake] #1522 governance MCP-subprocess deadline trips on a loaded macOS cell — code exo |
| branch only: a branch exists and is not merged (this board does not track its owner) | #3887 | [data-integrity][postgres] a healthy-but-STALE AGE returns Ok(empty), so no error-based fall |
| not started | #3889 | [ci][flake] mcp_chat_tool_sinks_never_carry_the_provider_body_3648 fails ~1-in-4 at 6 thread |
| not started | #3890 | AGE current-edge filtering compares RFC3339 bytes and client clock instead of timestamp inst |
| not started | #3891 | AGE kg_timeline caps before Rust filtering and orders on an unprojected created_at property |
| not started | #3892 | Graph conformance: add a projection-lag pin that does not manufacture synchronous parity |
| not started | #3893 | SQLite kg_query temporal ordering remains non-total at the row cap |
| not started | #3899 | [compliance][gates] the cert-expiry gate can force the document to be honest about drift, bu |
| on release/v1.0.0 (promoted); open until the GA tag | #3901 | [federation] attested cross-id title merge dequarantines a DIFFERENT local row: dequarantine |
| not started | #3902 | [docs] CONFIG_SCHEMA alias-URL line implies [llm.auto_tag] honours base_url; resolve_llm_aut |
| not started | #3904 | [test-infra] k6_dispatch_persists_uuidv7_correlation_id has a fixed 5s wall-clock budget and |
| not started | #3905 | [federation][parity] metadata.contamination survives a peer overwrite on Postgres and is des |
| not started | #3907 | [security][3806-rider] #3823's `[decision]` half — the two plaintext-acceptance tests live o |
| not started | #3912 | [ci][infra] self-hosted linux-fed runners build the full sal-postgres test fan-out into <wor |
| not started | #3914 | [gate] check-shared-namespace-claims self-test still hardcodes the migration FILE PREFIXES ( |
| on release/v1.0.0 (promoted); open until the GA tag | #3918 | [ci][gate] check-cert-leg-nonvacuity.sh cannot see a 'skipping <name>:' soft-skip — 6 of 10 |
| not started | #3920 | [test][observability] five AGE cert tests install no tracing subscriber, so every WARN they |
| not started | #3921 | [ci][trigger-drift] session-boot-lifetime.yml push trigger is pinned to release/v0.6.3.1 — i |
| on release/v1.0.0 (promoted); open until the GA tag | #3925 | [docs-drift][postgres] src/store/postgres.rs:8211-8214 claims "the supersedes path, #3324, s |
| owned by a lane | #3938 | CI flake on f1-macos-fed-2: config1_full_surface_attested_nhi_e2e "daemon never became ready |
| not started | #3939 | [reliability] subscription dispatch-refusal drops the delivery when the DLQ write fails — th |
| on release/v1.0.0 (promoted); open until the GA tag | #3943 | for_admin_checked(<caller>, true) with a hard-coded literal disarms the type-level admin-gat |
| not started | #3944 | docs-vs-SSOT gate is blind to the verb form: DEVELOPER_GUIDE.md:867 ships 103/102 MCP tools |
| on release/v1.0.0 (promoted); open until the GA tag | #3945 | Boids item 3 part 5 residuals: title-slot marker drop on sqlite, local-file sync not normali |
| not started | #3947 | 3 broken rustdoc intra-doc links to the (private) is_visible_to_caller in storage/mod.rs |
| not started | #3951 | [test][flake] two load-sensitive lib cells: logs_tail_follows_appended_lines and build_post_ |
| on release/v1.0.0 (promoted); open until the GA tag | #3953 | [security][postgres] ownership check SQL_SELECT_OWNER_AGENT_ID_BY_ID is FOR UPDATE on the PO |
| not started | #3954 | [ci][gate] gates-for-diff derives its gate set FROM the workflows, so 5 check-*.sh run NOWHE |
| not started | #3955 | [ci][gate] prod-vs-test boundary is split 2/5: five gates grep the literal name `mod tests` |
| not started | #3956 | [ci][gate] two WIRED gates have no --self-test at all (check-test-keydir-mode, check-bootstr |
| not started | #3958 | [postgres][kg] kg_timeline returns an EMPTY timeline with HTTP 200: projected AGE edges carr |
| on release/v1.0.0 (promoted); open until the GA tag | #3960 | [data-integrity][G6] item-3 part 5 added an un-routed durable-TEXT mutation: SQL_MERGE_INBOU |
| owned by a lane | #3962 | [federation][recall] title-slot merge where the LOCAL row wins still writes the SENDER's shi |
| branch only: a branch exists and is not merged (this board does not track its owner) | #3963 | sqlite federation receive refunds a quota dimension it never charged — refund_op(QuotaOp::Me |
| branch only: a branch exists and is not merged (this board does not track its owner) | #3964 | coverage: the per-module threshold gate never checks 325 of 504 src files — 76 are below the |
| branch only: a branch exists and is not merged (this board does not track its owner) | #3965 | [security][gate] C8 for_admin allowlist is file:literal-scoped, so ADDITIONAL privacy-bypass |
| branch only: a branch exists and is not merged (this board does not track its owner) | #3970 | [security][gate] C8 for_admin allowlist count is per file: a SWAP (remove an approved site, |
| not started | #3971 | [wake-hub][security] M4: refresher root hand-off followed a symlinked source (CWE-59) and wa |
| not started | #3972 | [wake-hub][security] M1: wake metadata (AI_MEMORY_WAKE_SENDER etc.) is peer-forgeable; carry |
| not started | #3973 | [ci][watchdog] linux-fed enterprise-fed full-suite watchdog (4800s) crossed its own 80% re-d |
| branch only: a branch exists and is not merged (this board does not track its owner) | #3974 | [security][audit] a world-writable [audit].path silently falls back to the platform default |
| branch only: a branch exists and is not merged (this board does not track its owner) | #3975 | [security][audit] audit::emit swallows write/flush errors after boot — a filled disk silentl |
| branch only: a branch exists and is not merged (this board does not track its owner) | #3979 | webhook deliveries still queued for a dispatch permit at shutdown or crash lose their audit |
| not started | #3980 | webhook: persist the delivery audit row at admission so a crash cannot lose a not-yet-starte |
| not started | #3981 | [security][gate] C8 for_admin gate silently DROPS a site whose argument contains parentheses |
| branch only: a branch exists and is not merged (this board does not track its owner) | #3982 | [security] kg_timeline (pg) per-target filter reads every target with for_admin(caller.clone |
| not started | #3983 | [deploy] batman-active compose: the sync service's folded YAML scalar renders 'fi exec ...' |
| found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner) | #3986 | [federation] transition funnels map a lease-read ERROR to "no lease" (lease_get(..).ok().fla |
| found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner) | #3988 | Promotion 4 red: pg serve never becomes healthy (signed_events_fresh_store_signs_3354_pg) on |
| found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner) | #3989 | [found-in-testing] README still promises access-driven mid→long auto-promotion and +1 priori |
| found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner) | #3990 | [found-in-testing] docs/telemetry.md promises tracing never carries memory payload, but thre |
| found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner) | #3991 | [found-in-testing] docs/telemetry.md says the HuggingFace model fetch is off by default; the |
| found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner) | #3992 | [found-in-testing] mobile-iot-deployment.md presents 10k–1M resource figures and Pixel batte |
| found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner) | #3993 | [found-in-testing] at-a-glance.html attributes its gauges to a 1,000-memory `ai-memory bench |
| found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner) | #3994 | [found-in-testing] at-a-glance.html says every destructive operation has an undo path and th |
| found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner) | #3995 | [found-in-testing] enterprise-deployment.md says the S76 gate guarantees AGE ≥30% faster tha |
| found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner) | #3996 | [found-in-testing] INSTALL.md says pre-built binaries are default-feature builds without mig |
| found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner) | #3997 | [found-in-testing] README says ai-memory uses zero context tokens until memory_recall; the t |
| found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner) | #3998 | [found-in-testing] production-deployment.md says the CLI never auto-generates an Ed25519 key |
| found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner) | #3999 | [found-in-testing] enterprise-deployment.md attributes a p50/p95/p99 latency table to the LA |
| found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner) | #4000 | [found-in-testing] audit-trail-coverage.md claims every successful write is chain-logged wit |
| found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner) | #4001 | [found-in-testing] Compliance docs and the boot log call the key-refresh interval the upper |
| found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner) | #4002 | [found-in-testing] NSA-CSI mapping tells clients to TOFU-pin the identity signature, but the |
| found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner) | #4003 | [found-in-testing] SECURITY.md says federation transport is mutually authenticated TLS; mTLS |
| found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner) | #4004 | [found-in-testing] CLI_REFERENCE describes --quorum-writes as 'W (peer acks required)'; W co |
| found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner) | #4005 | [found-in-testing] memory_subscribe schema says 'http only for loopback' and 'Omit for unsig |
| found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner) | #4006 | [found-in-testing] `serve --help` says no TLS flags = plain HTTP, and CLI_REFERENCE/SECURITY |
| found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner) | #4007 | [found-in-testing] CLI_REFERENCE says an invalid tier is refused before the database is open |
| found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner) | #4008 | [found-in-testing] v1.0.0 release notes say cert-postgres-age.yml builds and runs the deploy |
| found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner) | #4009 | [found-in-testing] v1.0.0 release notes say the abort-after-commit harness proves writes sur |
| found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner) | #4010 | [found-in-testing] Postgres swarm_rewind locks the root before its id-sorted descendants whi |
| found-in-testing · not started | #4011 | [found-in-testing] #3806 decision client can take confidence from a token outside the verdic |
| found-in-testing · not started | #4012 | [found-in-testing] #3806 decision breaker: a stale in-flight success resets the half-open st |
| found-in-testing · not started | #4013 | [found-in-testing] #3806 source census test is red at the landing tip: src/curator/mod.rs na |
| found-in-testing · not started | #4014 | boot --cwd changes the whole process current directory to infer a namespace, and ignores a f |
| found-in-testing · not started | #4015 | Lib test fixture roots resolve .local-runs from the mutable process cwd; 4 recover::tests ce |
| found-in-testing · not started | #4016 | Test cwd writers use no shared lock: cli::helpers has a private cwd_lock that excludes nobod |
| found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner) | #4017 | [found-in-testing] federation receive: containment release trusts same-ID as proof the store |
| found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner) | #4018 | [found-in-testing] internal-only egress: admission host parser can disagree with the HTTP cl |
| found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner) | #4020 | [security][gate] C8 for_admin gate is text-matched: a renaming import (CallerContext as X) o |
| found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner) | #4021 | [audit] audit verify does not detect a sequence gap, so events lost after boot leave a trail |
| found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner) | #4022 | [docs] storage::recall rustdoc says 'touch + auto-promote' — recall is pure (#1953) and auto |
| found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner) | #4023 | [found-in-testing] Postgres federation receive checks peer namespace scope on a pre-read, th |
| found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner) | #4024 | [found-in-testing] Federation transition receive burns the operation nonce before the CAS an |
| found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner) | #4026 | [found-in-testing] Postgres federation receive charges cumulative storage quota for a duplic |
| found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner) | #4027 | [found-in-testing] Postgres signal receive redacts before the forged-signature check, so wit |
| found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner) | #4028 | [found-in-testing] Postgres /sync/push reports the sender as receiver_agent_id, and several |
| found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner) | #4029 | [found-in-testing] Federation inbound apply checks the forget tombstone outside its write tr |
| found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner) | #4030 | [found-in-testing] CRDT merge selects content by parsed instant but the output updated_at by |
| found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner) | #4031 | [found-in-testing] CRDT deep merge is order-dependent: a retained metadata key or optional f |
| found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner) | #4032 | [found-in-testing] CRDT merge persists tag/metadata unions larger than the receiver's own va |
| found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner) | #4033 | [found-in-testing] Outbound federation push (per-row, DLQ replay, bulk) buffers peer respons |
| found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner) | #4034 | [found-in-testing] SQLite update resolves omitted fields before taking the write lock, so an |
| found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner) | #4035 | [found-in-testing] SQLite federation merge replaces the single pre-merge recovery snapshot e |
| found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner) | #4036 | [found-in-testing] SQLite FTS deep integrity check omits rank=1, so it never compares the in |
| found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner) | #4037 | [found-in-testing] Postgres run_gc(archive=true) copies one expiry snapshot then deletes by |
| found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner) | #4038 | [found-in-testing] Postgres duplicate link apply is a relational no-op (ON CONFLICT DO NOTHI |
| found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner) | #4039 | [found-in-testing] Postgres AGE outbox drainer checks link existence without a row lock, so |
| found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner) | #4040 | [found-in-testing] Postgres embedding-dimension migration counts at-risk vectors outside its |
| found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner) | #4041 | [found-in-testing] Postgres pool max_connections=1 is accepted, but bootstrap holds the only |
| found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner) | #4042 | [found-in-testing] Governance glob matcher keeps only the last wildcard checkpoint, so patte |
| found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner) | #4043 | [found-in-testing] SQLite namespace-standard lookup turns read errors into NoPolicy, so a po |
| found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner) | #4044 | [found-in-testing] Agent-action check reads the policy version after evaluation, so a concur |
| found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner) | #4045 | [found-in-testing] Curator consolidation summarizes and logs stale source snapshots, then co |
| found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner) | #4046 | [found-in-testing] Autonomous consolidation accepts an empty or whitespace LLM summary and r |
| found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner) | #4047 | [found-in-testing] OllamaClient circuit breaker promises to open after 3 consecutive failure |
| found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner) | #4048 | [found-in-testing] #3822 residual: model-pull clients are built without the internal-only DN |
| found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner) | #4049 | [found-in-testing] #3883 residual: schema-init reports success over an orphaned AGE graph sc |
| found-in-testing · not started | #4050 | [found-in-testing] #3925 residual: get_any docstring again says no Postgres path writes cont |
| found-in-testing · not started | #4051 | [found-in-testing] #3926 residual: README v1.0.0 introduction still says not on Postgres and |
| found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner) | #4054 | [security][gate] production_lines skips any file whose NAME contains a test/tests segment — |
| found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner) | #4056 | [found-in-testing] Postgres HTTP notify ignores the configured [ttl] tier override and persi |
| found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner) | #4057 | [found-in-testing] wake-hub stale-socket probe is a blocking Unix connect with no deadline, |
| found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner) | #4058 | [found-in-testing] inbox --wait: an empty hub welcome calls note_read() without reading, res |
| found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner) | #4060 | [found-in-testing] Federation pullers treat an explicit next_since: null as a legacy absent |
| found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner) | #4062 | [found-in-testing] Graceful serve shutdown certifies (final witness + WAL checkpoint) while |
| found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner) | #4066 | [found-in-testing] A stale enrolled-key refresh can reinstall a revoked API key after HTTP r |
| found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner) | #4067 | [found-in-testing] serve --catchup-interval-secs=0 stamps the erasure-outbox drainability ma |
| found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner) | #4068 | [found-in-testing] Authenticated monitoring routes check credentials outside the shared auth |
| found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner) | #4069 | [found-in-testing] Webhook fan-out never checks the subscriber can read the source memory, s |
| found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner) | #4070 | [found-in-testing] PostgreSQL serve shutdown force-emits the final witness and checkpoint ag |
| found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner) | #4071 | [found-in-testing] Inbox SSE frames carry the process-wide wake seq, exposing other recipien |
| found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner) | #4072 | [found-in-testing] HTTP serve drains gracefully only on SIGINT; SIGTERM (container image def |
| found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner) | #4073 | [found-in-testing] Approval handler rustdoc still specifies the old <timestamp>.<body> HMAC |
| found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner) | #4074 | [found-in-testing] hmac_secret boot validator panics on non-ASCII input (byte-pair slicing i |
| found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner) | #4075 | [found-in-testing] Webhook DNS pinning resolves implicit-port https:// hostnames to port 80 |
| found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner) | #4076 | [found-in-testing] agent_notified webhook payload carries two correlation_id keys (delivery |
| found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner) | #4077 | [found-in-testing] Plan-C documented upgrade recipe runs 'docker compose down -v', deleting |
| found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner) | #4078 | [found-in-testing] SQLite upgrades from v96-v99 drop the embed_skip clear triggers and never |
| found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner) | #4079 | [found-in-testing] Postgres unsubscribe deletes only the local subscription row; the peer re |
| found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner) | #4080 | [found-in-testing] Shipped backup/sync/curator systemd units lack the main unit's AI_MEMORY_ |
| found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner) | #4081 | [found-in-testing] Postgres GET /subscriptions hardcodes dispatch_count/failure_count to 0; |
| found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner) | #4082 | [found-in-testing] install.sh copies directly over the installed binary with no staging or a |
| found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner) | #4083 | [found-in-testing] Webhook module docs advertise an allow_private_networks override and raw- |
| found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner) | #4084 | [found-in-testing] packaging/systemd README says the Debian and COPR packages ship the syste |
| found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner) | #4085 | Flaky lib test: mcp::archive tests read AI_MEMORY_AGENT_ID unguarded and pick up another tes |
| found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner) | #4086 | [security][audit] events lost at the tail before a restart are invisible: init resumes from |
| not started | #4087 | [found-in-testing] inbox --wait silently degrades to its timeout when the wake-hub cannot ad |
| found-in-testing · on release/v1.0.0 (promoted); open until the GA tag | #4088 | Flaky lib test: mcp::tests::tools_call_emits_span_* capture an empty trace (tracing callsite |
| found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner) | #4089 | [found-in-testing] HTTP handlers run CPU-bound embed/rerank inline on tokio workers (bulk cr |
| found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner) | #4090 | daemon_runtime issue_1579_a3_boot_log_redacts_store_url_password captures tracing in the sha |
| found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner) | #4091 | [data-integrity] HTTP consolidate replaces sources with a content-free placeholder when the |
| branch only: a branch exists and is not merged (this board does not track its owner) | #4116 | [found-in-review] governance escalate producer writes the pending on a second connection whi |
| branch only: a branch exists and is not merged (this board does not track its owner) | #4120 | [found-in-review] wake-hub stale-socket probe: on macOS/BSD a full accept queue answers ECON |
| found-in-testing · not started | #4121 | [found-in-testing] ai-memory doctor LLM/embedding reachability probes bypass the inference-e |
| found-in-testing · not started | #4122 | [found-in-testing] ai-memory reembed bypasses inference-egress admission and the pin: sends |
| found-in-testing · not started | #4123 | [found-in-testing] HF Hub model-weight downloads (local embedder + cross-encoder) are outsid |
| branch only: a branch exists and is not merged (this board does not track its owner) | #4124 | [found-in-review] recall cost metering silently drops counter updates on SQLITE_BUSY (debug- |
| branch only: a branch exists and is not merged (this board does not track its owner) | #4125 | [found-in-review] wake-hub seq_high_watermark is the host-wide WAKE_SEQ, the same cross-tena |
| found-in-testing · not started | #4126 | [ci][flaky] tests/common free_port TOCTOU: a spawned serve loses its port (EADDRINUSE, exit |
| not started | #4132 | MCP tools/list ships JSON-Schema $ref + definitions (3 in full, 1 in core); gateways that do |
| found-in-testing · not started | #4134 | [found-in-testing] storage decode: an unknown/corrupt lifecycle_state is read as Open, so a |
| not started | #4137 | perf(embed): spawn_blocking embed/rerank (#3988, #4089) has no concurrency bound — up to 512 |
| not started | #4138 | [docs] #4128 review docs: 228 dead intra-document anchors (market audit 171, facet register |
| found-in-testing · not started | #4139 | [docs] access-driven mid->long auto-promotion + priority ladder still documented in 10 place |
| found-in-testing · not started | #4142 | [docs] CLAUDE.md says c8-precheck.yml has TWENTY-SIX jobs; it has 33 (9 gates unnamed in the |
| found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner) | #4145 | [security][gate] MCP transport-isolation gate skips any src/mcp file whose name contains "te |
| found-in-testing · not started | #4146 | v1 CLI import probes the forget tombstone outside the insert's transaction, so a concurrent |
| found-in-testing · not started | #4147 | [found-in-testing][security][sqlite] #3957 residual: HTTP and MCP update/delete sqlite funne |
| found-in-testing · not started | #4150 | [security][gate] C8 #3943 for_admin_checked literal detector misses constant-true arguments |
| found-in-testing · not started | #4151 | [security][gate] #3872 promotion-geometry gate hardcodes release/v1.0.0; every promotion PR |
| found-in-testing · not started | #4152 | [gate] #3872 promotion-ancestry steps run first in required-contexts-gate; a #3872 failure b |
| found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner) | #4153 | [found-in-testing] Postgres DELETE /api/v1/memories/{id} never fans the deletion out to fede |
| found-in-testing · not started | #4154 | [security] egress refusal records the raw base_url, so credentials embedded in an LLM/embedd |
| found-in-testing · not started | #4155 | decontaminate.rs:147 duplicates the SQL literal that SELECT_LIFECYCLE_META_BY_ID_SQL already |
| found-in-testing · not started | #4156 | insert_if_newer lifecycle comment says remote system-only states are 'never adopted', but on |
| found-in-testing · not started | #4157 | swarm-rewind structural cell stops at the first ')' and misses nested or multi-line for_admi |
| found-in-testing · not started | #4158 | no test pins that every inbound federation funnel normalises the node-local metadata overlay |
| found-in-testing · not started | #4159 | kg_age_orphan_graph_3883 test double-closes a pool, and its comment calls the no-op close th |
| found-in-testing · not started | #4160 | no structural pin asserts that no Postgres pool stays open across the AGE orphan/heal catalo |
| found-in-testing · not started | #4161 | coverage/thresholds.toml says the metrics.rs exception is documented in coverage/policy.md; |
| found-in-testing · not started | #4162 | foreign-text-to-caller pending ledger carries 3 stale entries whose issues (#3707, #3766) ar |
| found-in-testing · not started | #4163 | US agent-memory market audit names operator host paths (/home/fate_two, /mnt/t9) in 4 method |
| found-in-testing · not started | #4164 | config/shape.rs doc says the asi-hard pin set is 28 knobs; PINNED_KNOB_COUNT is 30 |
| found-in-testing · not started | #4165 | webhook dispatch: DNS_SSRF_REJECTED lumps a permanent address-class refusal with a transient |
| found-in-testing · not started | #4166 | three serve-spawning posture tests use env_clear without AI_MEMORY_EMBED_OFFLINE while waiti |
| found-in-testing · not started | #4167 | config_auto_tag_endpoint test asserts !contains("IGNORED"), which also matches the macOS Lib |
| found-in-testing · not started | #4168 | SECURITY.md 'Pinned so it cannot decay' overstates the MCP transport-isolation gate: it sees |
| found-in-testing · not started | #4169 | SECURITY.md 'The one documented exception' omits the inference clients and the wake UDS clie |
| found-in-testing · not started | #4170 | QUAL-7 legacy error-type ceiling sits exactly at its limit (48) and the migrate-then-ratchet |
| found-in-testing · not started | #4171 | routine materialization returns and persists raw database driver error text to the MCP calle |
| found-in-testing · not started | #4172 | [found-in-testing] Local pending-action approve surfaces (HTTP, MCP, CLI) commit the approva |
| found-in-testing · not started | #4173 | [#3806] synthesis delete arm under fallback='refuse' only WARNs and returns NoOp; the caller |
| found-in-testing · not started | #4174 | [#3806] curator Pass-1 dry run still calls the generative summariser (summarize_memories) be |
| found-in-testing · not started | #4175 | [#3806] decision_seams: stale NoDecider doc, LowConfidence Display always prints the consoli |
| found-in-testing · not started | #4176 | [#3806] no test pins the chat decision client's {content:null, refusal:""} → Unavailable pat |
| found-in-testing · not started | #4177 | [#3806] 127.0.0.2 egress-transport cell skips off Linux yet reports ok; CHANGELOG claims it |
| found-in-testing · not started | #4178 | [#3806] mod review_sync_probe_cells documented 'not for landing' is in code that is landing |
| found-in-testing · not started | #4179 | [#3806] merge-judge census pins cut each file at the first 'mod tests', so a caller below an |
| found-in-testing · not started | #4180 | wake_hub snapshot_publish F1 owner-check test skips (eprintln) when euid==0, so the planned |
| found-in-testing · not started | #4181 | docs/telemetry.md claims the content-leak census fails CI on any new call site; it only sees |
| found-in-testing · not started | #4183 | [#4045] consolidate_with_expected_versions returns sqlite VersionConflict but postgres Store |
| found-in-testing · not started | #4184 | [#4010] pg test's DROP TRIGGER/FUNCTION cleanup only runs on success, so a failing run leave |
| found-in-testing · not started | #4185 | [#4048] model_pull_egress_pin test panics on hosts with IPv6 disabled (TcpListener::bind("[: |
| found-in-testing · not started | #4186 | [#3979] boot WARN's started_in_flight count treats claimed-but-unwritten workers as having a |
| found-in-testing · not started | #4187 | [security] swarm rewind computes the descendant set outside the stamping transaction on both |
| found-in-testing · not started | #4188 | postgres delete: the inbox retain-vs-erase routing reads the row's namespace on the pool out |
| found-in-testing · not started | #4189 | postgres delete: a non-recipient's refusal on an inbox row can carry the archive path's erro |
| found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner) | #4190 | [security][audit] audit::init swallows a chain-tail read error and silently restarts the cha |
| found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner) | #4191 | [security][audit] audit verify never checks the head of a genesis-anchored trail: events los |
| found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner) | #4192 | [security][#3806] [decision] sends the vendor alias API key to any base_url, ahead of the se |
| found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner) | #4193 | [security][#3806] decision client honours HTTP(S)_PROXY/ALL_PROXY and follows redirects outs |
| found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner) | #4194 | [security] ResolvedLlm API key copies are never zeroized; resolve_llm runs 3x per boot/reloa |
| found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner) | #4195 | [security][#3806] decision_clients::construct and OpenAiCompatibleDecider::new are pub and a |
| found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner) | #4197 | [gate] attest_level_string_invariant skips every file whose name contains 'test' (incl. src/ |
| found-in-testing · landed on rehearsal, awaiting promotion 4 | #4198 | [gate] census: 28 tests/ scanners walk src/ and each decides production-vs-test on its own; |
| found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner) | #4199 | [security][audit] forensic governance log: read_chain_tail swallows read errors and forks th |
| found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner) | #4201 | [found-in-testing] #3806 [decision]: a per-vendor env credential is sent to any [decision].b |
| found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner) | #4202 | [security][audit] forensic read_chain_tail inspects only the newest file: an empty day file |
| found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner) | #4203 | [security][audit] a future-dated forensic file (forensic-2099-01-01.jsonl) sorts last and re |
| found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner) | #4204 | [found-in-testing][federation] #4024 fix: an already-applied transition re-delivered after a |
| found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner) | #4205 | [security][audit] forensic log: a row appended after a torn, unterminated last line is glued |
| found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner) | #4206 | [found-in-testing][data-integrity] federation title-slot newer-wins upsert overwrites a loca |
| found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner) | #4207 | [found-in-testing][security] ai-memory backup opens the primary through the migrating funnel |
| found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner) | #4208 | [found-in-testing][security] #3901 residual: an attested same-id push that LOSES the merge s |
| found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner) | #4209 | [found-in-testing][postgres] bulk re-own UPDATE locks memories in heap order, not id order: |
| found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner) | #4210 | [found-in-testing][postgres] link locks source then target (FK key-share), not id order: loc |
| found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner) | #4211 | [security][audit] a torn audit write (short write / failed newline on a filling disk) leaves |
| found-in-testing · not started | #4212 | [found-in-testing][test-infra] cmd_bench_relevance_dispatch_both_render_arms_ok flakes: no n |
| found-in-testing · not started | #4213 | [found-in-testing][security] batman-active compose: rotating AI_MEMORY_API_KEY is silently i |
| found-in-testing · not started | #4214 | [found-in-testing] embedding backfill scan fails the whole batch on ONE non-BLOB encrypted_e |
| found-in-testing · not started | #4215 | [found-in-testing][flake] lib test provenance_is_metadata_only_zero_link_rows_1599 reads the |
| found-in-testing · not started | #4216 | [found-in-testing][data-integrity] federation merge keeps version = MAX(local, remote) while |
| found-in-testing · not started | #4217 | [found-in-testing][data-integrity] data writes that do not bump memories.version and are not |
| found-in-testing · not started | #4218 | [found-in-testing][security] a federation peer can pin memories.version at i64::MAX (no inbo |
| found-in-testing · not started | #4219 | [docs][v1.0.0 GA] Tier and profile are described as the same control |
| found-in-testing · not started | #4220 | [docs][v1.0.0 GA] The published test-attribute census is stale |
| found-in-testing · not started | #4221 | [docs][v1.0.0 GA] Two README REST examples retain retired inventory counts |
| found-in-testing · not started | #4222 | [docs][v1.0.0 GA] SECURITY’s migration table still promises an absent-map bypass |
| found-in-testing · not started | #4223 | [docs][v1.0.0 GA] PERFORMANCE incorrectly requires a nonempty peer map at boot |
| found-in-testing · not started | #4224 | [docs][v1.0.0 GA] SECURITY retains a superseded third-party audit commitment |
| found-in-testing · not started | #4225 | [docs][v1.0.0 GA] Live landing page labels transport encryption as end-to-end content encryp |
| found-in-testing · not started | #4226 | [docs][v1.0.0 GA] The “exact parameter schemas” reference omits 31 field rows in four core t |
| found-in-testing · not started | #4227 | [docs][v1.0.0 GA] memory_store collision handling is not unconditional upsert |
| found-in-testing · not started | #4228 | [docs][v1.0.0 GA] API prose assigns expires_at to the wrong MCP tool |
| found-in-testing · not started | #4229 | [docs][v1.0.0 GA] Read endpoints can return 429 through authentication backoff |
| found-in-testing · not started | #4230 | [docs][v1.0.0 GA] Pages still offers removed query-string API-key authentication |
| found-in-testing · not started | #4231 | [docs][v1.0.0 GA] Pages route count and complete-reference claim omit current HTTP surfaces |
| found-in-testing · not started | #4232 | [docs][v1.0.0 GA] Pages says admission control is disabled unless opted in |
| found-in-testing · not started | #4233 | [docs][v1.0.0 GA] Pages gives the wrong retention policy for HTTP deletion |
| found-in-testing · not started | #4234 | [docs][v1.0.0 GA] HTTP search does not require q when source_uri is supplied |
| found-in-testing · not started | #4235 | [docs][v1.0.0 GA] Pages says the passphrase-file flag exports the secret |
| found-in-testing · not started | #4236 | [docs][v1.0.0 GA] Audit cadence sample promises a marker that is reserved |
| found-in-testing · not started | #4237 | [docs][v1.0.0 GA] The legacy-config paragraph excludes the inert max_memory_mb exception |
| found-in-testing · not started | #4238 | [docs][v1.0.0 GA] Universal precedence wording has supported exceptions |
| found-in-testing · not started | #4239 | [docs][v1.0.0 GA] The anonymize row promises to suppress a PID that remains in the fallback |
| found-in-testing · not started | #4240 | [docs][v1.0.0 GA] The complete CLI reference has unlisted flags and Pages lacks whole comman |
| found-in-testing · not started | #4241 | [docs][v1.0.0 GA] schema_version is described as selecting a parser, but it is an advisory m |
| found-in-testing · not started | #4242 | [docs][v1.0.0 GA] The exhaustive env index omits the enterprise posture boot gate |
| found-in-testing · not started | #4243 | [docs][v1.0.0 GA] The encryption page claims TLS 1.3 only, but the server explicitly permits |
| found-in-testing · not started | #4244 | [docs][v1.0.0 GA] Root SECURITY still promises that an absent peer allowlist bypasses namesp |
| found-in-testing · not started | #4245 | [docs][v1.0.0 GA] The advertised TOML setting for content encryption names a nonexistent sto |
| found-in-testing · not started | #4246 | [docs][v1.0.0 GA] The NSA mapping still describes a 16-entry asi-hard table; the release has |
| found-in-testing · not started | #4247 | [docs][v1.0.0 GA] Compliance prose labels allow-on-silence governance as default-closed |
| found-in-testing · not started | #4248 | [docs][v1.0.0 GA] The current Pages landing page calls hop-by-hop federation encryption end- |
| found-in-testing · not started | #4249 | [docs][v1.0.0 GA] The Pages delete guarantee applies per-record crypto-erasure to every dele |
| found-in-testing · not started | #4250 | [docs][v1.0.0 GA] Pages presents PostgreSQL at-rest assurance as machine-verified although i |
| found-in-testing · not started | #4251 | [docs][v1.0.0 GA] The attestation setup guide omits the strict HTTP capture-turn surface and |
| found-in-testing · not started | #4252 | [docs][v1.0.0 GA] Unshipped SAL adapters are prescribed as deployment choices |
| found-in-testing · not started | #4253 | [docs][v1.0.0 GA] SQLite reader serialization claim is stale |
| found-in-testing · not started | #4254 | [docs][v1.0.0 GA] Pages retains direct-to-PostgreSQL agent access promise |
| found-in-testing · not started | #4255 | [docs][v1.0.0 GA] Pages retains native CDC promise |
| found-in-testing · not started | #4256 | [docs][v1.0.0 GA] Closed PostgreSQL receiver-lane limitation remains in T4/T5 docs |
| found-in-testing · not started | #4257 | [docs][v1.0.0 GA] Incorrect quorum defaults |
| found-in-testing · not started | #4258 | [docs][v1.0.0 GA] Incorrect quorum-shortfall response contract |
| found-in-testing · not started | #4259 | [docs][v1.0.0 GA] Stale PostgreSQL route partition counts |
| found-in-testing · not started | #4260 | [docs][v1.0.0 GA] Pages retains retired unread marker |
| found-in-testing · not started | #4261 | [docs][v1.0.0 GA] Keyword portability and trait-name claims are stale |
| found-in-testing · not started | #4262 | [docs][v1.0.0 GA] Pages advertises an obsolete certified version triple and a removed nightl |
| found-in-testing · not started | #4263 | [docs][v1.0.0 GA] Release notes deny PostgreSQL paths that the code now supports |
| found-in-testing · not started | #4264 | [docs][v1.0.0 GA] Migration narrative contradicts the actual v100 ladder and the v92 rebuild |
| found-in-testing · not started | #4265 | [docs][v1.0.0 GA] Attestation-default release paragraph omits the enforced HTTP capture rout |
| found-in-testing · not started | #4266 | [docs][v1.0.0 GA] TTL replacement wording contradicts extension floors |
| found-in-testing · not started | #4267 | [docs][v1.0.0 GA] Home page promises retry until success |
| found-in-testing · not started | #4268 | [docs][v1.0.0 GA] Subset test coverage becomes every-capability coverage |
| found-in-testing · not started | #4269 | [docs][v1.0.0 GA] Green test results lack public raw receipts |
| found-in-testing · not started | #4270 | [docs][v1.0.0 GA] Release assurance documents are not published |
| found-in-testing · not started | #4271 | [found-in-testing] Postgres-backed daemons: the governance hook writes its Escalate pending |
| found-in-testing · not started | #4272 | [security][audit] AI_MEMORY_REQUIRE_FORENSIC_SINK (asi-hard) does not refuse when the forens |
| found-in-testing · not started | #4273 | [security][audit] a FIFO (or symlink) named as a forensic daily file is opened without a typ |
| found-in-testing · not started | #4274 | [found-in-testing][security][data-integrity] HTTP POST /api/v1/import re-admits forgotten id |
| found-in-testing · not started | #4275 | [found-in-testing][security] MCP federation_forward reads the forward response with an unbou |
| found-in-testing · not started | #4276 | [found-in-testing][security] consolidation funnels skip storage-funnel credential redaction |
| found-in-testing · not started | #4277 | [found-in-testing][data-integrity] CLI auto-consolidate byte-slices source text at 200 bytes |
| found-in-testing · not started | #4278 | [found-in-testing][data-integrity] update whose re-embed fails keeps the OLD vector attached |
| found-in-testing · not started | #4279 | [found-in-testing] SecretRefusal text tells the API caller to disable the secret screen, inc |
| found-in-testing · not started | #4280 | [found-in-testing] Namespace-only subscriptions write a DLQ row for every matching event by |
| found-in-testing · not started | #4281 | [found-in-testing][federation][gdpr] HTTP bulk forget (forget_memories) does not propagate d |
| found-in-testing · not started | #4283 | [found-in-testing] Subscriptions withdrawn BEFORE the #4079 fix stay on peers and keep dispa |
| found-in-testing · not started | #4284 | [found-in-testing] a worker-thread eprintln! deadlocks a CLI verb that holds the stderr lock |
| found-in-testing · not started | #4285 | [security][governance] #4043 residual: a bound standard whose governance JSON does not parse |
| found-in-testing · not started | #4286 | [found-in-testing][data-integrity] HTTP/MCP consolidate with an LLM-generated summary consum |
| found-in-testing · not started | #4287 | [found-in-testing][data-integrity] curator persist_auto_tags / persist_contradiction write b |
| found-in-testing · not started | #4288 | [found-in-testing] SAL has no typed version conflict: postgres update/supersede return Integ |
| found-in-testing · not started | #4289 | [found-in-testing] curator reflection pass writes a reflection over sources that changed whi |
| found-in-testing · not started | #4290 | [found-in-testing] restore_archived repairs malformed metadata but restores the pre-archive |
| found-in-testing · not started | #4291 | [docker] #3838 key-rotation rewrite drops api_key lines inside TOML tables and multi-line st |
| found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner) | #4292 | [gates] check-test-env-lock and check-create-extension-allowlist self-tests strand probe fil |
| found-in-testing · not started | #4293 | test: fed_consolidate_source_attest_parity_2863 postgres_prebinding_signature_rejected_visib |
| found-in-testing · not started | #4295 | [docs][audit] audit_write_failures_total says 'any increase is a gap' (it can over-count); V |
Gate: Conductor landing gate on ceb199f0e — 49 rows, 1 non-green, RUN_DONE · quiet 7202 min · 0 processes · disk 159G / 1131G.