Issues

[finding] GitHub MCP `list_issue_types` returns 403 for this integration while `issue_write` sets native types fine — a seat that probes the list first will wrongly conclude typing is unavailable

domain:skills

finding

#8574

· hotlong opened

on Aug 13, 2026

Cloud artifact-kernel-factory must adopt partitionAssembledViewArtifacts before env artifacts carrying expanded view items boot against the #5320 tighten

pm:blocked

repo:cloud

Task

#8573

· qq9340100 opened

on Aug 13, 2026

A batch row's `httpStatus` reads only `.status`, so two genuine 4xx populations ship a row with no status at all

#8570

· os-zhuang opened

on Aug 13, 2026

drivers(turso): the unbacked-conflict-target refusal has no cross-face parity pin — the two wordings can drift without a test noticing

domain:drivers

pm:queue

Task

#8568

· os-zhuang opened

on Aug 13, 2026

drivers(sql): the unbacked-conflict-target refusal is SQLite-only — Postgres and MySQL still answer the raw driver error

#8567

· os-zhuang opened

on Aug 13, 2026

`sys_webhook.headers_secret` has a required plaintext SHAPE that no write path enforces — the ordinary data API accepts any string, and the author only finds out at the next delivery

#8566

· os-zhuang opened

on Aug 13, 2026

spec: remove the deprecated `LocationCoordinatesSchema` / `CurrencyValueSchema` dead exports at the next spec major (ADR-0104)

domain:spec

pm:on-hold

Task

#8562

· qq9340100 opened

on Aug 13, 2026

[finding] A frontier-based backlog sweep never revisits an untouched card — two bare cards sat invisible for ~8 hours across ~8 triage rounds

domain:skills

finding

Task

#8561

· hotlong opened

on Aug 13, 2026

objectql accepts `""` into a `secret` field: it encrypts the empty string, mints a `sys_secret` row for it, and every read path then reports "a secret is set"

#8559

· os-zhuang opened

on Aug 13, 2026

finding: the declared-index replacement arm's guards are redundantly covered, so any single one can be deleted with every test still green

domain:drivers

finding

Task

#8557

· os-zhuang opened

on Aug 13, 2026

`sys_setting`'s unique key is installation-wide on a tenant-scoped object — but unlike the #8323 class it has a real argument for staying that way

#8555

· os-zhuang opened

on Aug 13, 2026

Five more instances of the #8323 class: admin- and user-authored names on tenant-scoped objects still carry installation-wide unique indexes

#8554

· os-zhuang opened

on Aug 13, 2026

Navigation Menu

Uh oh!

All issues

[finding] GitHub MCP `list_issue_types` returns 403 for this integration while `issue_write` sets native types fine — a seat that probes the list first will wrongly conclude typing is unavailable

Cloud artifact-kernel-factory must adopt partitionAssembledViewArtifacts before env artifacts carrying expanded view items boot against the #5320 tighten

A batch row's `httpStatus` reads only `.status`, so two genuine 4xx populations ship a row with no status at all

drivers(turso): the unbacked-conflict-target refusal has no cross-face parity pin — the two wordings can drift without a test noticing

drivers(sql): the unbacked-conflict-target refusal is SQLite-only — Postgres and MySQL still answer the raw driver error

`sys_webhook.headers_secret` has a required plaintext SHAPE that no write path enforces — the ordinary data API accepts any string, and the author only finds out at the next delivery

spec: remove the deprecated `LocationCoordinatesSchema` / `CurrencyValueSchema` dead exports at the next spec major (ADR-0104)

[finding] A frontier-based backlog sweep never revisits an untouched card — two bare cards sat invisible for ~8 hours across ~8 triage rounds

objectql accepts `""` into a `secret` field: it encrypts the empty string, mints a `sys_secret` row for it, and every read path then reports "a secret is set"

finding: the declared-index replacement arm's guards are redundantly covered, so any single one can be deleted with every test still green

`sys_setting`'s unique key is installation-wide on a tenant-scoped object — but unlike the #8323 class it has a real argument for staying that way

Five more instances of the #8323 class: admin- and user-authored names on tenant-scoped objects still carry installation-wide unique indexes

Uh oh!

Search results