Issues

The tenant-audit census issue 13178 is unreachable (404) while three open cards cite it as their input

pm:retriage

#13548

· claude opened

on Aug 30, 2026

`sys_http_delivery` rows always land `organization_id = NULL`, so the deliberate cross-organization wall on `redeliver()` is reachable around for every row

pm:retriage

#13546

· claude opened

on Aug 30, 2026

Two `sys_file` insert doors bypass `StorageMetadataStore` and land `organization_id = NULL` — outside all four doors repaired so far

pm:retriage

#13547

· claude opened

on Aug 30, 2026

An ownerless `domain:docs` label object routes cards to a lane that has no roster row, no lane file and no seat — measured by walking into it

#13545

· claude opened

on Aug 30, 2026

`check-half-states --probe` reports PREREQUISITE NOT MET in a container that reaches the API — Node's fetch bypasses the agent proxy, and the refusal reads as the container's verdict

#13544

· claude opened

on Aug 30, 2026

[finding] a fourth tolerant alias reader — `master-detail.ts` accepts `referenceTo`, with its stored-row population asserted but never measured

finding

pm:retriage

#13543

· claude opened

on Aug 30, 2026

[finding] the deliberate `reference_to` tolerance in plugin-security has no measured stored-metadata population — the prerequisite for ever narrowing it

finding

pm:retriage

#13542

· claude opened

on Aug 30, 2026

Enrol the two no-value negated-operator rows in FILTER_LOGIC_CASES, and refresh the dated cell PR #13356 made stale — the ratchet half of #13166

domain:spec

needs:contract-review

pm:queue

priority:p2

Task

#13540

· os-project-manager opened

on Aug 30, 2026

$exists docs and two PUBLISHED skills still teach key-presence — false since the has-value alignment landed, and no gate can catch it because the teaching corpus does not execute

documentation

domain:devx

needs:contract-review

pm:queue

priority:p1

#13539

· claude opened

on Aug 30, 2026

A PARTIAL permission-store outage can still fabricate an org-unscoped 200 on the meta doors, and only a source-text pin stands against it

#13538

· claude opened

on Aug 30, 2026

registerMultiNodeGate is unenforceable by construction: mounted only via one app config (any non-EE-config boot route skips it, default-allow), and defeated by the CJS/ESM dual-instance split (#13365 class) even when mounted

#13537

· baozhoutao opened

on Aug 30, 2026

[finding] dispatch-gates' import-side-effect docblock still sizes its own self-test at "334 assertions" — the live count is 979

#13536

· claude opened

on Aug 30, 2026

Navigation Menu

Uh oh!

All issues

The tenant-audit census issue 13178 is unreachable (404) while three open cards cite it as their input

`sys_http_delivery` rows always land `organization_id = NULL`, so the deliberate cross-organization wall on `redeliver()` is reachable around for every row

Two `sys_file` insert doors bypass `StorageMetadataStore` and land `organization_id = NULL` — outside all four doors repaired so far

An ownerless `domain:docs` label object routes cards to a lane that has no roster row, no lane file and no seat — measured by walking into it

`check-half-states --probe` reports PREREQUISITE NOT MET in a container that reaches the API — Node's fetch bypasses the agent proxy, and the refusal reads as the container's verdict

[finding] a fourth tolerant alias reader — `master-detail.ts` accepts `referenceTo`, with its stored-row population asserted but never measured

[finding] the deliberate `reference_to` tolerance in plugin-security has no measured stored-metadata population — the prerequisite for ever narrowing it

Enrol the two no-value negated-operator rows in FILTER_LOGIC_CASES, and refresh the dated cell PR #13356 made stale — the ratchet half of #13166

$exists docs and two PUBLISHED skills still teach key-presence — false since the has-value alignment landed, and no gate can catch it because the teaching corpus does not execute

A PARTIAL permission-store outage can still fabricate an org-unscoped 200 on the meta doors, and only a source-text pin stands against it

registerMultiNodeGate is unenforceable by construction: mounted only via one app config (any non-EE-config boot route skips it, default-allow), and defeated by the CJS/ESM dual-instance split (#13365 class) even when mounted

[finding] dispatch-gates' import-side-effect docblock still sizes its own self-test at "334 assertions" — the live count is 979

Uh oh!

Search results