-
Notifications
You must be signed in to change notification settings - Fork 0
All issues
Issue creation is restricted in this repository
Issues
is:issue state:open
is:issue state:open
Search results
fix(deploy): retire orphaned RoomDO namespace in hosted Wrangler exports
area:deploymentA — deal blockersA — deal blockerskind:bugDefectDefectStatus: Open.#454 In KenTaniguchi-R/agentcall;Self-hosted CI is a bridge, not the target state — and it must not survive the public flip unmitigated
area:deploymentA — deal blockersA — deal blockersarea:securityC — endpoint securityC — endpoint securitykind:decisionA decision to make, not code to writeA decision to make, not code to writeStatus: Open.#452 In KenTaniguchi-R/agentcall;The agent runtime is a protocol-level enum, so a third vendor cannot be added without changing the wire contract
area:productProduct gapsProduct gapskind:decisionA decision to make, not code to writeA decision to make, not code to writeStatus: Open.#443 In KenTaniguchi-R/agentcall;- Status: Open.#423 In KenTaniguchi-R/agentcall;
- Status: Open.#422 In KenTaniguchi-R/agentcall;
Bash bypasses the denylist entirely — a caller can read any denied path
area:securityC — endpoint securityC — endpoint securityStatus: Open.#419 In KenTaniguchi-R/agentcall;Auto-loaded CLAUDE.md reaches callers although ~/.claude is denied — the guard bounds tool calls, not context
area:securityC — endpoint securityC — endpoint securityStatus: Open.#416 In KenTaniguchi-R/agentcall;Callee answers ok but the caller never receives the reply (seen only on a local relay — verify against hosted)
area:availabilityD — parityD — parityStatus: Open.#414 In KenTaniguchi-R/agentcall;Bash cannot be recorded under Codex — decide whether it caps the reply or documents the hole
area:securityC — endpoint securityC — endpoint securityStatus: Open.#402 In KenTaniguchi-R/agentcall;Build the per-tool-call provenance record — it does not exist today
area:securityC — endpoint securityC — endpoint securityStatus: Open.#400 In KenTaniguchi-R/agentcall;Enforce at the sink, not only at the read: provenance backstop on the reply
area:securityC — endpoint securityC — endpoint securityStatus: Open.#399 In KenTaniguchi-R/agentcall;A labelled source grants .gitignore'd files too — every comparable product excludes them
area:securityC — endpoint securityC — endpoint securityStatus: Open.#397 In KenTaniguchi-R/agentcall;