Issues

• CI: GHSA-ch52-4w7c-c8xp (http-cache-semantics) fails the dependency advisory gate; not-reachable exception until 2026-11-04

  bugIn ProgressP1
  monad-developers/ultrafuzz#1278 · Filter by author aviggiano opened on Oct 5, 2026

• Research: shared collaboration log for parallel agent lanes (Team-of-N vs Best-of-N)

  enhancementP3
  monad-developers/ultrafuzz#1271 · Filter by author mrthankyou opened on Oct 2, 2026
  2

  

• Provider-home preflight follow-ups: hermetic lifecycle-inspection test, OpenRouterAgent, relative CLI home variables

  bugP3
  monad-developers/ultrafuzz#1270 · Filter by author mrthankyou opened on Oct 2, 2026

• report: include target commit and remediation, simplify Markdown, always estimate spend

  enhancementIn ProgressP1
  monad-developers/ultrafuzz#1268 · Filter by author aviggiano opened on Oct 2, 2026

• No headless-Linux path for Claude subscription agents: CLAUDE_CODE_OAUTH_TOKEN never reaches them, even when allowlisted

  bugP2
  monad-developers/ultrafuzz#1266 · Filter by author mrthankyou opened on Oct 2, 2026

• Allow PARTIAL reports from any node

  decision-neededenhancementP2
  monad-developers/ultrafuzz#1260 · Filter by author aviggiano opened on Oct 1, 2026
  3

• clean leaves task worktree registrations, ultrafuzz/<run>/* branches and the engine run record behind

  bugP3
  monad-developers/ultrafuzz#1257 · Filter by author mrthankyou opened on Oct 1, 2026
  1

• Release artifacts should publish a binary and checksums

  enhancementP2
  monad-developers/ultrafuzz#1255 · Filter by author aviggiano opened on Oct 1, 2026

• Task worktrees of unpinned runs have uninitialized lib/ submodules, so forge clones dependencies over the network

  bugP1
  monad-developers/ultrafuzz#1251 · Filter by author mrthankyou opened on Oct 1, 2026

• Forge guard aborts every forge call on macOS: ulimit -v fails on Darwin under set -eu

  bugP3
  monad-developers/ultrafuzz#1250 · Filter by author mrthankyou opened on Oct 1, 2026

• Finders put a test path in proof_of_concept.code, so the final report's correct PoC trips the preservation gate

  bugP3
  monad-developers/ultrafuzz#1249 · Filter by author aviggiano opened on Oct 1, 2026

• Strip C1 controls and bidi overrides from recorded failure text

  bugP3
  monad-developers/ultrafuzz#1248 · Filter by author aviggiano opened on Oct 1, 2026

• Failure-text redaction ignores the configured provider credential variable names

  bugP3
  monad-developers/ultrafuzz#1247 · Filter by author aviggiano opened on Oct 1, 2026

• Write the prompt input index from the live task plan; delete the sealed prompt-artifact authority binding

  bugIn ProgressP1
  monad-developers/ultrafuzz#1234 · Filter by author aviggiano opened on Sep 30, 2026
  2

  

• Follow-ups to #1183: drop the dead per-task smithersRunId, and scope report attempt history by reset round

  bugP3
  monad-developers/ultrafuzz#1233 · Filter by author aviggiano opened on Sep 30, 2026

• Remove the now-inert [execution] config surface after the per-node cloud removal

  enhancementP3
  monad-developers/ultrafuzz#1232 · Filter by author aviggiano opened on Sep 30, 2026

• keep_workspaces = false never reaps task worktrees

  bugP2
  monad-developers/ultrafuzz#1227 · Filter by author mrthankyou opened on Sep 30, 2026
  1

• Codex API-key preflight probes the default endpoint when only openai_base_url is set

  bugP3
  monad-developers/ultrafuzz#1218 · Filter by author aviggiano opened on Sep 29, 2026

• Verifier secret gate misses configured credentials that contain JSON-escaped characters

  bugP2
  monad-developers/ultrafuzz#1217 · Filter by author aviggiano opened on Sep 29, 2026

• Pin required executables and runtime dependencies for detached runs

  bugP3
  monad-developers/ultrafuzz#1143 · Filter by author aviggiano opened on Sep 25, 2026
  2

• workflow_deadline_seconds is only enforced while an operator runs a CLI command; unattended runs have no wall clock

  bugP3
  monad-developers/ultrafuzz#1110 · Filter by author mrthankyou opened on Sep 5, 2026
  2

  

• Concurrent agents race on OAuth token refresh; three immediate retries all re-race and kill the run with an opaque "Claude run failed"

  enhancementP3
  monad-developers/ultrafuzz#1084 · Filter by author mrthankyou opened on Sep 3, 2026
  4

  

• Re-evaluate sealed execution snapshots: cost/benefit after repeated campaign losses

  enhancementP1
  monad-developers/ultrafuzz#921 · Filter by author aviggiano opened on Aug 26, 2026 · v0.1.0
  2

• Invariant implementation can emit an unfalsifiable property suite: oracles that import and re-derive the implementation

  bugP2
  monad-developers/ultrafuzz#687 · Filter by author aviggiano opened on Aug 19, 2026

• Provider stream disconnects fail the node outright with no reconnect or resume

  bugP3
  monad-developers/ultrafuzz#676 · Filter by author aviggiano opened on Aug 19, 2026
  5