-
Notifications
You must be signed in to change notification settings - Fork 0
All issues
Issue creation is restricted in this repository
Issues
is:issue state:open
is:issue state:open
Search results
make: four auth enum catalogues are missing from COVERAGE_FLOOR_PACKAGES
bugSomething isn't workingSomething isn't workingphase-2Targeted for roadmap Phase 2 (see ROADMAP.md)Targeted for roadmap Phase 2 (see ROADMAP.md)Status: Open.#311 In prokopto-dev/dragonkillparty;idempotency: Service.Sweep has no scheduled caller, so records accumulate for the life of the install
enhancementNew feature or requestNew feature or requestStatus: Open.#310 In prokopto-dev/dragonkillparty;db: the last-owner triggers have no runtime presence check, only the CI fingerprint
enhancementNew feature or requestNew feature or requestphase-2Targeted for roadmap Phase 2 (see ROADMAP.md)Targeted for roadmap Phase 2 (see ROADMAP.md)Status: Open.#309 In prokopto-dev/dragonkillparty;audit: first run writes no audit row, because the hash chain lives inside ledger.Commit
enhancementNew feature or requestNew feature or requestphase-2Targeted for roadmap Phase 2 (see ROADMAP.md)Targeted for roadmap Phase 2 (see ROADMAP.md)Status: Open.#308 In prokopto-dev/dragonkillparty;auth: §3.2's bundled offline breached-password blocklist is not implemented
enhancementNew feature or requestNew feature or requestphase-2Targeted for roadmap Phase 2 (see ROADMAP.md)Targeted for roadmap Phase 2 (see ROADMAP.md)Status: Open.#306 In prokopto-dev/dragonkillparty;api: the /setup surface — server-rendered form, 503 setup_required while unbootstrapped, 410 afterwards
enhancementNew feature or requestNew feature or requestphase-2Targeted for roadmap Phase 2 (see ROADMAP.md)Targeted for roadmap Phase 2 (see ROADMAP.md)Status: Open.#307 In prokopto-dev/dragonkillparty;auth: username normalisation is the ASCII half of canonical §8, not NFKC
enhancementNew feature or requestNew feature or requestphase-2Targeted for roadmap Phase 2 (see ROADMAP.md)Targeted for roadmap Phase 2 (see ROADMAP.md)Status: Open.#305 In prokopto-dev/dragonkillparty;middleware: rate limiting keys only on the client IP — the per-principal, per-token and per-operation policies of §10 are unbuilt
enhancementNew feature or requestNew feature or requestphase-2Targeted for roadmap Phase 2 (see ROADMAP.md)Targeted for roadmap Phase 2 (see ROADMAP.md)Status: Open.#304 In prokopto-dev/dragonkillparty;ops: the empty-trust-list forwarded-header warning is logged once and surfaced nowhere
enhancementNew feature or requestNew feature or requestphase-2Targeted for roadmap Phase 2 (see ROADMAP.md)Targeted for roadmap Phase 2 (see ROADMAP.md)Status: Open.#303 In prokopto-dev/dragonkillparty;api: /readyz local disclosure still refuses on the presence of a proxy header instead of resolving the client
enhancementNew feature or requestNew feature or requestphase-2Targeted for roadmap Phase 2 (see ROADMAP.md)Targeted for roadmap Phase 2 (see ROADMAP.md)Status: Open.#302 In prokopto-dev/dragonkillparty;auth: session.ip and api_token.last_used_ip are still empty now that the resolved client IP exists
enhancementNew feature or requestNew feature or requestphase-2Targeted for roadmap Phase 2 (see ROADMAP.md)Targeted for roadmap Phase 2 (see ROADMAP.md)Status: Open.#301 In prokopto-dev/dragonkillparty;auth: X-Forwarded-Proto from a trusted proxy does not set an effective scheme, so Secure cookies and HSTS have no input
enhancementNew feature or requestNew feature or requestphase-2Targeted for roadmap Phase 2 (see ROADMAP.md)Targeted for roadmap Phase 2 (see ROADMAP.md)Status: Open.#300 In prokopto-dev/dragonkillparty;