Node and state are measured live (process working directories on f2, an SSH probe to f1); the sector column is maintained by the conductor and was last reviewed 2026-09-29.
Operator directive 2026-09-27 15:10Z: every issue identified in testing is fixed, retested until 100% fixed, and documented 1:1. Not every issue has a fix lane yet: each row below shows its measured state (not started, branch only, owned, fixed on a branch), and moves to closed as its fix merges. This series started at 0 closed on 2026-09-27.
| branch only: a branch exists and is not merged (this board does not track its owner) | #3152 | SAL update splits the content patch and the lifecycle transition across two commits on BOTH |
| branch only: a branch exists and is not merged (this board does not track its owner) | #3248 | [claims-truth] residuals after docs batch 2 (#3169): at-a-glance 'NSA 10 of 10' card body, f |
| branch only: a branch exists and is not merged (this board does not track its owner) | #3500 | v97 upgrade: name the offending agent when the legacy agent_pubkey backfill hits the canonic |
| branch only: a branch exists and is not merged (this board does not track its owner) | #3545 | [bug] wrap codex default --system is rejected by Codex CLI >= 0.153 — fail closed outside th |
| branch only: a branch exists and is not merged (this board does not track its owner) | #3619 | [asi-hard][claims] FED_QUARANTINE_UNATTRIBUTED=TRUE meets the asi-hard floor (case-insensiti |
| branch only: a branch exists and is not merged (this board does not track its owner) | #3637 | [review] adversarial code + security review of the A2A wake plane (rust-a2a implementation) |
| branch only: a branch exists and is not merged (this board does not track its owner) | #3651 | [observability][HIGH] Logging failures can silently degrade boot and runtime delivery |
| branch only: a branch exists and is not merged (this board does not track its owner) | #3660 | [observability][HIGH] Engaged read decisions can lose durable audit evidence despite DLQ-bac |
| on release/v1.0.0 (promoted); open until the GA tag | #3709 | [GA][ux] make encrypted-in-transit the easy path — zero-config TLS on first boot, one comman |
| branch only: a branch exists and is not merged (this board does not track its owner) | #3729 | federation: an EXPIRED local lease still blocks a peer's signed action transition (#3367 cla |
| on release/v1.0.0 (promoted); open until the GA tag | #3745 | webhook dispatcher stalls under load: workers park on a futex before/after the DLQ bookkeepi |
| owned by a lane | #3806 | [v1.0.0-GA][enterprise] `[decision]` provider slot: a pluggable structured-decision model cl |
| on release/v1.0.0 (promoted); open until the GA tag | #3807 | [ga-blocker][docs] `src/autonomy.rs:55` claims the destructive consolidation merge is gated |
| on release/v1.0.0 (promoted); open until the GA tag | #3818 | [data-integrity] four MCP tools on the read-only inventory write (lease sweep, signed_events |
| on release/v1.0.0 (promoted); open until the GA tag | #3822 | [security][config] inference egress has no "corporate internal network only" posture — the m |
| on release/v1.0.0 (promoted); open until the GA tag | #3823 | [security] a non-loopback `http://` inference endpoint is accepted, and two tests assert it |
| owned by a lane | #3826 | [test] the `[decision]` structural ratchet is red on the stacked integration base — the allo |
| branch only: a branch exists and is not merged (this board does not track its owner) | #3838 | [deploy] docker-compose.batman-active.yml cannot start: serve --bind is not a flag, image pi |
| on release/v1.0.0 (promoted); open until the GA tag | #3872 | landing chain measures the rehearsal tip; CI measures the pull_request merge commit — gate t |
| on release/v1.0.0 (promoted); open until the GA tag | #3883 | AGE: project_link_into_age swallows an orphaned-graph "already exists" on the WRITE path — T |
| branch only: a branch exists and is not merged (this board does not track its owner) | #3887 | [data-integrity][postgres] a healthy-but-STALE AGE returns Ok(empty), so no error-based fall |
| on release/v1.0.0 (promoted); open until the GA tag | #3901 | [federation] attested cross-id title merge dequarantines a DIFFERENT local row: dequarantine |
| on release/v1.0.0 (promoted); open until the GA tag | #3922 | docs(reviews): 3x7 adversarial vote — Boids emergence vs ai-memory as endpoint memory for ag |
| on release/v1.0.0 (promoted); open until the GA tag | #3924 | [cli][postgres] `ai-memory swarm-rewind` on a PG node has no refuse_pg_store guard: it opens |
| on release/v1.0.0 (promoted); open until the GA tag | #3925 | [docs-drift][postgres] src/store/postgres.rs:8211-8214 claims "the supersedes path, #3324, s |
| on release/v1.0.0 (promoted); open until the GA tag | #3926 | [docs][GA notes] #3266's "fully in the v1.0.0 GA release" is false on Postgres: #3322 swarm_ |
| on release/v1.0.0 (promoted); open until the GA tag | #3927 | [postgres][parity] PG recall_hybrid drops the contradiction soft-loser down-weight that sear |
| on release/v1.0.0 (promoted); open until the GA tag | #3928 | [federation][docs] private-by-default rows (incl. inbox rows) are push-replicated to every p |
| on release/v1.0.0 (promoted); open until the GA tag | #3934 | record_stop_structural_b7: is_fn_start cannot see pub(super)/pub(in ..)/pub(self) fns — bodi |
| on release/v1.0.0 (promoted); open until the GA tag | #3937 | CI red on 3c00cd301: tests/storage_chain_fbl.rs fbl34_{touch,fold}_decade_bump_caps_at_acces |
| owned by a lane | #3938 | CI flake on f1-macos-fed-2: config1_full_surface_attested_nhi_e2e "daemon never became ready |
| on release/v1.0.0 (promoted); open until the GA tag | #3941 | tests/k7_hmac.rs: latent race — sibling cells set the process-global server-wide HMAC secret |
| on release/v1.0.0 (promoted); open until the GA tag | #3942 | record_stop_structural_b7: write_sql_line is single-line conjunctive (UPDATE and SET on the |
| on release/v1.0.0 (promoted); open until the GA tag | #3943 | for_admin_checked(<caller>, true) with a hard-coded literal disarms the type-level admin-gat |
| on release/v1.0.0 (promoted); open until the GA tag | #3946 | [postgres][lineage] lineage walk silently misses an edge whose AGE projection is still pendi |
| on release/v1.0.0 (promoted); open until the GA tag | #3953 | [security][postgres] ownership check SQL_SELECT_OWNER_AGENT_ID_BY_ID is FOR UPDATE on the PO |
| owned by a lane | #3962 | [federation][recall] title-slot merge where the LOCAL row wins still writes the SENDER's shi |
| branch only: a branch exists and is not merged (this board does not track its owner) | #3963 | sqlite federation receive refunds a quota dimension it never charged — refund_op(QuotaOp::Me |
| branch only: a branch exists and is not merged (this board does not track its owner) | #3964 | coverage: the per-module threshold gate never checks 325 of 504 src files — 76 are below the |
| branch only: a branch exists and is not merged (this board does not track its owner) | #3965 | [security][gate] C8 for_admin allowlist is file:literal-scoped, so ADDITIONAL privacy-bypass |
| branch only: a branch exists and is not merged (this board does not track its owner) | #3979 | webhook deliveries still queued for a dispatch permit at shutdown or crash lose their audit |
| found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner) | #3984 | [ci][gate] check-required-contexts-live.sh compare_files runs comm without LC_ALL=C — can DR |
| found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner) | #3985 | [docs][ci] not-required ledger instructs "mirror FIRST" (header + 4 entries) — the order the |
| found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner) | #3986 | [federation] transition funnels map a lease-read ERROR to "no lease" (lease_get(..).ok().fla |
| found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner) | #3987 | [docs] CLAUDE.md env row 148 says federation::receive_auth is sal-gated — it is not (KNOBS a |
| found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner) | #3988 | Promotion 4 red: pg serve never becomes healthy (signed_events_fresh_store_signs_3354_pg) on |
| found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner) | #3989 | [found-in-testing] README still promises access-driven mid→long auto-promotion and +1 priori |
| found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner) | #3990 | [found-in-testing] docs/telemetry.md promises tracing never carries memory payload, but thre |
| found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner) | #3991 | [found-in-testing] docs/telemetry.md says the HuggingFace model fetch is off by default; the |
| found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner) | #3992 | [found-in-testing] mobile-iot-deployment.md presents 10k–1M resource figures and Pixel batte |
| found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner) | #3993 | [found-in-testing] at-a-glance.html attributes its gauges to a 1,000-memory `ai-memory bench |
| found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner) | #3994 | [found-in-testing] at-a-glance.html says every destructive operation has an undo path and th |
| found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner) | #3995 | [found-in-testing] enterprise-deployment.md says the S76 gate guarantees AGE ≥30% faster tha |
| found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner) | #3996 | [found-in-testing] INSTALL.md says pre-built binaries are default-feature builds without mig |
| found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner) | #3997 | [found-in-testing] README says ai-memory uses zero context tokens until memory_recall; the t |
| found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner) | #3998 | [found-in-testing] production-deployment.md says the CLI never auto-generates an Ed25519 key |
| found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner) | #3999 | [found-in-testing] enterprise-deployment.md attributes a p50/p95/p99 latency table to the LA |
| found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner) | #4000 | [found-in-testing] audit-trail-coverage.md claims every successful write is chain-logged wit |
| found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner) | #4001 | [found-in-testing] Compliance docs and the boot log call the key-refresh interval the upper |
| found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner) | #4002 | [found-in-testing] NSA-CSI mapping tells clients to TOFU-pin the identity signature, but the |
| found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner) | #4003 | [found-in-testing] SECURITY.md says federation transport is mutually authenticated TLS; mTLS |
| found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner) | #4004 | [found-in-testing] CLI_REFERENCE describes --quorum-writes as 'W (peer acks required)'; W co |
| found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner) | #4005 | [found-in-testing] memory_subscribe schema says 'http only for loopback' and 'Omit for unsig |
| found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner) | #4006 | [found-in-testing] `serve --help` says no TLS flags = plain HTTP, and CLI_REFERENCE/SECURITY |
| found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner) | #4007 | [found-in-testing] CLI_REFERENCE says an invalid tier is refused before the database is open |
| found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner) | #4008 | [found-in-testing] v1.0.0 release notes say cert-postgres-age.yml builds and runs the deploy |
| found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner) | #4009 | [found-in-testing] v1.0.0 release notes say the abort-after-commit harness proves writes sur |
| found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner) | #4010 | [found-in-testing] Postgres swarm_rewind locks the root before its id-sorted descendants whi |
| found-in-testing · not started | #4011 | [found-in-testing] #3806 decision client can take confidence from a token outside the verdic |
| found-in-testing · not started | #4012 | [found-in-testing] #3806 decision breaker: a stale in-flight success resets the half-open st |
| found-in-testing · not started | #4013 | [found-in-testing] #3806 source census test is red at the landing tip: src/curator/mod.rs na |
| found-in-testing · not started | #4014 | boot --cwd changes the whole process current directory to infer a namespace, and ignores a f |
| found-in-testing · not started | #4015 | Lib test fixture roots resolve .local-runs from the mutable process cwd; 4 recover::tests ce |
| found-in-testing · not started | #4016 | Test cwd writers use no shared lock: cli::helpers has a private cwd_lock that excludes nobod |
| found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner) | #4017 | [found-in-testing] federation receive: containment release trusts same-ID as proof the store |
| found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner) | #4018 | [found-in-testing] internal-only egress: admission host parser can disagree with the HTTP cl |
| found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner) | #4020 | [security][gate] C8 for_admin gate is text-matched: a renaming import (CallerContext as X) o |
| found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner) | #4021 | [audit] audit verify does not detect a sequence gap, so events lost after boot leave a trail |
| found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner) | #4022 | [docs] storage::recall rustdoc says 'touch + auto-promote' — recall is pure (#1953) and auto |
| found-in-testing · not started | #4023 | [found-in-testing] Postgres federation receive checks peer namespace scope on a pre-read, th |
| found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner) | #4024 | [found-in-testing] Federation transition receive burns the operation nonce before the CAS an |
| found-in-testing · not started | #4025 | [found-in-testing] Federated pending-action approval commits before execution; a failed or l |
| found-in-testing · not started | #4026 | [found-in-testing] Postgres federation receive charges cumulative storage quota for a duplic |
| found-in-testing · not started | #4027 | [found-in-testing] Postgres signal receive redacts before the forged-signature check, so wit |
| found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner) | #4028 | [found-in-testing] Postgres /sync/push reports the sender as receiver_agent_id, and several |
| found-in-testing · not started | #4029 | [found-in-testing] Federation inbound apply checks the forget tombstone outside its write tr |
| found-in-testing · not started | #4030 | [found-in-testing] CRDT merge selects content by parsed instant but the output updated_at by |
| found-in-testing · not started | #4031 | [found-in-testing] CRDT deep merge is order-dependent: a retained metadata key or optional f |
| found-in-testing · not started | #4032 | [found-in-testing] CRDT merge persists tag/metadata unions larger than the receiver's own va |
| found-in-testing · not started | #4033 | [found-in-testing] Outbound federation push (per-row, DLQ replay, bulk) buffers peer respons |
| found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner) | #4034 | [found-in-testing] SQLite update resolves omitted fields before taking the write lock, so an |
| found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner) | #4035 | [found-in-testing] SQLite federation merge replaces the single pre-merge recovery snapshot e |
| found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner) | #4036 | [found-in-testing] SQLite FTS deep integrity check omits rank=1, so it never compares the in |
| found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner) | #4037 | [found-in-testing] Postgres run_gc(archive=true) copies one expiry snapshot then deletes by |
| found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner) | #4038 | [found-in-testing] Postgres duplicate link apply is a relational no-op (ON CONFLICT DO NOTHI |
| found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner) | #4039 | [found-in-testing] Postgres AGE outbox drainer checks link existence without a row lock, so |
| found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner) | #4040 | [found-in-testing] Postgres embedding-dimension migration counts at-risk vectors outside its |
| found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner) | #4041 | [found-in-testing] Postgres pool max_connections=1 is accepted, but bootstrap holds the only |
| found-in-testing · not started | #4042 | [found-in-testing] Governance glob matcher keeps only the last wildcard checkpoint, so patte |
| found-in-testing · not started | #4043 | [found-in-testing] SQLite namespace-standard lookup turns read errors into NoPolicy, so a po |
| found-in-testing · not started | #4044 | [found-in-testing] Agent-action check reads the policy version after evaluation, so a concur |
| found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner) | #4045 | [found-in-testing] Curator consolidation summarizes and logs stale source snapshots, then co |
| found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner) | #4046 | [found-in-testing] Autonomous consolidation accepts an empty or whitespace LLM summary and r |
| found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner) | #4047 | [found-in-testing] OllamaClient circuit breaker promises to open after 3 consecutive failure |
| found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner) | #4048 | [found-in-testing] #3822 residual: model-pull clients are built without the internal-only DN |
| found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner) | #4049 | [found-in-testing] #3883 residual: schema-init reports success over an orphaned AGE graph sc |
| found-in-testing · not started | #4050 | [found-in-testing] #3925 residual: get_any docstring again says no Postgres path writes cont |
| found-in-testing · not started | #4051 | [found-in-testing] #3926 residual: README v1.0.0 introduction still says not on Postgres and |
| found-in-testing · not started | #4052 | [found-in-testing] #3934 residual: fn_body_has_gate parity slicer credits a following functi |
| found-in-testing · not started | #4053 | [found-in-testing] #3953 residual: Postgres update applies the lifecycle change after the ow |
| found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner) | #4054 | [security][gate] production_lines skips any file whose NAME contains a test/tests segment — |
| found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner) | #4056 | [found-in-testing] Postgres HTTP notify ignores the configured [ttl] tier override and persi |
| found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner) | #4057 | [found-in-testing] wake-hub stale-socket probe is a blocking Unix connect with no deadline, |
| found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner) | #4058 | [found-in-testing] inbox --wait: an empty hub welcome calls note_read() without reading, res |
| found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner) | #4060 | [found-in-testing] Federation pullers treat an explicit next_since: null as a legacy absent |
| found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner) | #4062 | [found-in-testing] Graceful serve shutdown certifies (final witness + WAL checkpoint) while |
| found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner) | #4066 | [found-in-testing] A stale enrolled-key refresh can reinstall a revoked API key after HTTP r |
| found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner) | #4067 | [found-in-testing] serve --catchup-interval-secs=0 stamps the erasure-outbox drainability ma |
| found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner) | #4068 | [found-in-testing] Authenticated monitoring routes check credentials outside the shared auth |
| found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner) | #4069 | [found-in-testing] Webhook fan-out never checks the subscriber can read the source memory, s |
| found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner) | #4070 | [found-in-testing] PostgreSQL serve shutdown force-emits the final witness and checkpoint ag |
| found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner) | #4071 | [found-in-testing] Inbox SSE frames carry the process-wide wake seq, exposing other recipien |
| found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner) | #4072 | [found-in-testing] HTTP serve drains gracefully only on SIGINT; SIGTERM (container image def |
| found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner) | #4073 | [found-in-testing] Approval handler rustdoc still specifies the old <timestamp>.<body> HMAC |
| found-in-testing · not started | #4074 | [found-in-testing] hmac_secret boot validator panics on non-ASCII input (byte-pair slicing i |
| found-in-testing · not started | #4075 | [found-in-testing] Webhook DNS pinning resolves implicit-port https:// hostnames to port 80 |
| found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner) | #4076 | [found-in-testing] agent_notified webhook payload carries two correlation_id keys (delivery |
| found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner) | #4077 | [found-in-testing] Plan-C documented upgrade recipe runs 'docker compose down -v', deleting |
| found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner) | #4078 | [found-in-testing] SQLite upgrades from v96-v99 drop the embed_skip clear triggers and never |
| found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner) | #4079 | [found-in-testing] Postgres unsubscribe deletes only the local subscription row; the peer re |
| found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner) | #4080 | [found-in-testing] Shipped backup/sync/curator systemd units lack the main unit's AI_MEMORY_ |
| found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner) | #4081 | [found-in-testing] Postgres GET /subscriptions hardcodes dispatch_count/failure_count to 0; |
| found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner) | #4082 | [found-in-testing] install.sh copies directly over the installed binary with no staging or a |
| found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner) | #4083 | [found-in-testing] Webhook module docs advertise an allow_private_networks override and raw- |
| found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner) | #4084 | [found-in-testing] packaging/systemd README says the Debian and COPR packages ship the syste |
| found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner) | #4085 | Flaky lib test: mcp::archive tests read AI_MEMORY_AGENT_ID unguarded and pick up another tes |
| found-in-testing · not started | #4086 | [security][audit] events lost at the tail before a restart are invisible: init resumes from |
| found-in-testing · on release/v1.0.0 (promoted); open until the GA tag | #4088 | Flaky lib test: mcp::tests::tools_call_emits_span_* capture an empty trace (tracing callsite |
| found-in-testing · not started | #4089 | [found-in-testing] HTTP handlers run CPU-bound embed/rerank inline on tokio workers (bulk cr |
| found-in-testing · not started | #4090 | daemon_runtime issue_1579_a3_boot_log_redacts_store_url_password captures tracing in the sha |
| found-in-testing · not started | #4091 | [data-integrity] HTTP consolidate replaces sources with a content-free placeholder when the |
| not started | #4116 | [found-in-review] governance escalate producer writes the pending on a second connection whi |
| branch only: a branch exists and is not merged (this board does not track its owner) | #4120 | [found-in-review] wake-hub stale-socket probe: on macOS/BSD a full accept queue answers ECON |
| found-in-testing · not started | #4121 | [found-in-testing] ai-memory doctor LLM/embedding reachability probes bypass the inference-e |
| found-in-testing · not started | #4122 | [found-in-testing] ai-memory reembed bypasses inference-egress admission and the pin: sends |
| found-in-testing · not started | #4123 | [found-in-testing] HF Hub model-weight downloads (local embedder + cross-encoder) are outsid |
| branch only: a branch exists and is not merged (this board does not track its owner) | #4124 | [found-in-review] recall cost metering silently drops counter updates on SQLITE_BUSY (debug- |
| not started | #4125 | [found-in-review] wake-hub seq_high_watermark is the host-wide WAKE_SEQ, the same cross-tena |
| found-in-testing · not started | #4126 | [ci][flaky] tests/common free_port TOCTOU: a spawned serve loses its port (EADDRINUSE, exit |
| not started | #4132 | MCP tools/list ships JSON-Schema $ref + definitions (3 in full, 1 in core); gateways that do |
| found-in-testing · not started | #4134 | [found-in-testing] storage decode: an unknown/corrupt lifecycle_state is read as Open, so a |
| found-in-testing · not started | #4139 | [docs] access-driven mid->long auto-promotion + priority ladder still documented in 10 place |
| found-in-testing · not started | #4142 | [docs] CLAUDE.md says c8-precheck.yml has TWENTY-SIX jobs; it has 33 (9 gates unnamed in the |
| found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner) | #4145 | [security][gate] MCP transport-isolation gate skips any src/mcp file whose name contains "te |
| found-in-testing · not started | #4146 | v1 CLI import probes the forget tombstone outside the insert's transaction, so a concurrent |
| found-in-testing · not started | #4147 | [found-in-testing][security][sqlite] #3957 residual: HTTP and MCP update/delete sqlite funne |
| found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner) | #4148 | [security][gate] B7 record-stop scanner: #3942 continuation join swallows a fn signature aft |
| found-in-testing · not started | #4150 | [security][gate] C8 #3943 for_admin_checked literal detector misses constant-true arguments |
| found-in-testing · not started | #4151 | [security][gate] #3872 promotion-geometry gate hardcodes release/v1.0.0; every promotion PR |
| found-in-testing · not started | #4152 | [gate] #3872 promotion-ancestry steps run first in required-contexts-gate; a #3872 failure b |
| found-in-testing · not started | #4153 | [found-in-testing] Postgres DELETE /api/v1/memories/{id} never fans the deletion out to fede |
| found-in-testing · not started | #4154 | [security] egress refusal records the raw base_url, so credentials embedded in an LLM/embedd |
| found-in-testing · not started | #4155 | decontaminate.rs:147 duplicates the SQL literal that SELECT_LIFECYCLE_META_BY_ID_SQL already |
| found-in-testing · not started | #4156 | insert_if_newer lifecycle comment says remote system-only states are 'never adopted', but on |
| found-in-testing · not started | #4157 | swarm-rewind structural cell stops at the first ')' and misses nested or multi-line for_admi |
| found-in-testing · not started | #4158 | no test pins that every inbound federation funnel normalises the node-local metadata overlay |
| found-in-testing · not started | #4159 | kg_age_orphan_graph_3883 test double-closes a pool, and its comment calls the no-op close th |
| found-in-testing · not started | #4160 | no structural pin asserts that no Postgres pool stays open across the AGE orphan/heal catalo |
| found-in-testing · not started | #4161 | coverage/thresholds.toml says the metrics.rs exception is documented in coverage/policy.md; |
| found-in-testing · not started | #4162 | foreign-text-to-caller pending ledger carries 3 stale entries whose issues (#3707, #3766) ar |
| found-in-testing · not started | #4163 | US agent-memory market audit names operator host paths (/home/fate_two, /mnt/t9) in 4 method |
| found-in-testing · not started | #4164 | config/shape.rs doc says the asi-hard pin set is 28 knobs; PINNED_KNOB_COUNT is 30 |
| found-in-testing · not started | #4165 | webhook dispatch: DNS_SSRF_REJECTED lumps a permanent address-class refusal with a transient |
| found-in-testing · not started | #4166 | three serve-spawning posture tests use env_clear without AI_MEMORY_EMBED_OFFLINE while waiti |
| found-in-testing · not started | #4167 | config_auto_tag_endpoint test asserts !contains("IGNORED"), which also matches the macOS Lib |
| found-in-testing · not started | #4168 | SECURITY.md 'Pinned so it cannot decay' overstates the MCP transport-isolation gate: it sees |
| found-in-testing · not started | #4169 | SECURITY.md 'The one documented exception' omits the inference clients and the wake UDS clie |
| found-in-testing · not started | #4170 | QUAL-7 legacy error-type ceiling sits exactly at its limit (48) and the migrate-then-ratchet |
| found-in-testing · not started | #4171 | routine materialization returns and persists raw database driver error text to the MCP calle |
| found-in-testing · not started | #4172 | [found-in-testing] Local pending-action approve surfaces (HTTP, MCP, CLI) commit the approva |
| found-in-testing · not started | #4173 | [#3806] synthesis delete arm under fallback='refuse' only WARNs and returns NoOp; the caller |
| found-in-testing · not started | #4174 | [#3806] curator Pass-1 dry run still calls the generative summariser (summarize_memories) be |
| found-in-testing · not started | #4175 | [#3806] decision_seams: stale NoDecider doc, LowConfidence Display always prints the consoli |
| found-in-testing · not started | #4176 | [#3806] no test pins the chat decision client's {content:null, refusal:""} → Unavailable pat |
| found-in-testing · not started | #4177 | [#3806] 127.0.0.2 egress-transport cell skips off Linux yet reports ok; CHANGELOG claims it |
| found-in-testing · not started | #4178 | [#3806] mod review_sync_probe_cells documented 'not for landing' is in code that is landing |
| found-in-testing · not started | #4179 | [#3806] merge-judge census pins cut each file at the first 'mod tests', so a caller below an |
| found-in-testing · not started | #4180 | wake_hub snapshot_publish F1 owner-check test skips (eprintln) when euid==0, so the planned |
| found-in-testing · not started | #4181 | docs/telemetry.md claims the content-leak census fails CI on any new call site; it only sees |
| found-in-testing · not started | #4183 | [#4045] consolidate_with_expected_versions returns sqlite VersionConflict but postgres Store |
| found-in-testing · not started | #4184 | [#4010] pg test's DROP TRIGGER/FUNCTION cleanup only runs on success, so a failing run leave |
| found-in-testing · not started | #4185 | [#4048] model_pull_egress_pin test panics on hosts with IPv6 disabled (TcpListener::bind("[: |
| found-in-testing · not started | #4186 | [#3979] boot WARN's started_in_flight count treats claimed-but-unwritten workers as having a |
| found-in-testing · not started | #4187 | [security] swarm rewind computes the descendant set outside the stamping transaction on both |
| found-in-testing · not started | #4188 | postgres delete: the inbox retain-vs-erase routing reads the row's namespace on the pool out |
| found-in-testing · not started | #4189 | postgres delete: a non-recipient's refusal on an inbox row can carry the archive path's erro |
| found-in-testing · not started | #4190 | [security][audit] audit::init swallows a chain-tail read error and silently restarts the cha |
| found-in-testing · not started | #4191 | [security][audit] audit verify never checks the head of a genesis-anchored trail: events los |
| found-in-testing · not started | #4192 | [security][#3806] [decision] sends the vendor alias API key to any base_url, ahead of the se |
| found-in-testing · not started | #4193 | [security][#3806] decision client honours HTTP(S)_PROXY/ALL_PROXY and follows redirects outs |
| found-in-testing · not started | #4194 | [security] ResolvedLlm API key copies are never zeroized; resolve_llm runs 3x per boot/reloa |
| found-in-testing · not started | #4195 | [security][#3806] decision_clients::construct and OpenAiCompatibleDecider::new are pub and a |
| found-in-testing · not started | #4197 | [gate] attest_level_string_invariant skips every file whose name contains 'test' (incl. src/ |
| found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner) | #4198 | [gate] census: 28 tests/ scanners walk src/ and each decides production-vs-test on its own; |
| found-in-testing · not started | #4199 | [security][audit] forensic governance log: read_chain_tail swallows read errors and forks th |
| found-in-testing · branch only: a branch exists and is not merged (this board does not track its owner) | #4200 | [found-in-testing][gate] db_open_funnel_ceiling_2445 is RED on the carrier: test-only owner_ |
| found-in-testing · not started | #4201 | [found-in-testing] #3806 [decision]: a per-vendor env credential is sent to any [decision].b |
| found-in-testing · not started | #4202 | [security][audit] forensic read_chain_tail inspects only the newest file: an empty day file |
| found-in-testing · not started | #4203 | [security][audit] a future-dated forensic file (forensic-2099-01-01.jsonl) sorts last and re |
Gate: Conductor landing gate on ceb199f0e — 49 rows, 1 non-green, RUN_DONE · quiet 5892 min · 0 processes · disk 344G / 333G.