-
Notifications
You must be signed in to change notification settings - Fork 0
All issues
Issue creation is restricted in this repository
Issues
is:issue state:open
is:issue state:open
Search results
Security infrastructure details (RBAC roles, auth flow, PII markers) exposed in release binary
priority:mediumModerate urgency; plan for near-termModerate urgency; plan for near-termrag-corerag-core craterag-core craterag-serverrag-server crate (Axum REST API)rag-server crate (Axum REST API)securitySecurity hardening and vulnerability fixesSecurity hardening and vulnerability fixesstatus:ready-for-devImplementation can start immediatelyImplementation can start immediatelyStatus: Open.#887 In HendrikReh/projectAlpha;Add cargo-vet for supply-chain crate review
backendBackend layer (server, core, storage)Backend layer (server, core, storage)enhancementNew feature or improvementNew feature or improvementpriority:lowLow urgency; address when convenientLow urgency; address when convenientsecuritySecurity hardening and vulnerability fixesSecurity hardening and vulnerability fixesstatus:backlogValid follow-up, not in active implementation sequenceValid follow-up, not in active implementation sequenceStatus: Open.#877 In HendrikReh/projectAlpha;Pin MCP server versions in Claude Code settings
enhancementNew feature or improvementNew feature or improvementpriority:mediumModerate urgency; plan for near-termModerate urgency; plan for near-termsecuritySecurity hardening and vulnerability fixesSecurity hardening and vulnerability fixesstatus:ready-for-devImplementation can start immediatelyImplementation can start immediatelyStatus: Open.#876 In HendrikReh/projectAlpha;Add Trivy container image scanning to CI
backendBackend layer (server, core, storage)Backend layer (server, core, storage)enhancementNew feature or improvementNew feature or improvementneeds-decisionBlocked pending architecture or policy decisionBlocked pending architecture or policy decisionpriority:mediumModerate urgency; plan for near-termModerate urgency; plan for near-termsecuritySecurity hardening and vulnerability fixesSecurity hardening and vulnerability fixesStatus: Open.#875 In HendrikReh/projectAlpha;Add npm audit to security-audit.yml CI workflow
enhancementNew feature or improvementNew feature or improvementpriority:mediumModerate urgency; plan for near-termModerate urgency; plan for near-termsecuritySecurity hardening and vulnerability fixesSecurity hardening and vulnerability fixesstatus:ready-for-devImplementation can start immediatelyImplementation can start immediatelyweb-clientNext.js web client UINext.js web client UIStatus: Open.#874 In HendrikReh/projectAlpha;Harden reconciliation monitor for orphan drift and replica coordination
backendBackend layer (server, core, storage)Backend layer (server, core, storage)enhancementNew feature or improvementNew feature or improvementobservabilityMetrics, tracing, logging, and monitoringMetrics, tracing, logging, and monitoringpriority:mediumModerate urgency; plan for near-termModerate urgency; plan for near-termrag-corerag-core craterag-core craterag-serverrag-server crate (Axum REST API)rag-server crate (Axum REST API)reliabilityStability, resilience, and fault toleranceStability, resilience, and fault tolerancestatus:backlogValid follow-up, not in active implementation sequenceValid follow-up, not in active implementation sequenceStatus: Open.#870 In HendrikReh/projectAlpha;Document secret rotation procedures and evaluate external secrets manager
documentationImprovements or additions to documentationImprovements or additions to documentationpriority:highImportant; schedule in current sprintImportant; schedule in current sprintsecuritySecurity hardening and vulnerability fixesSecurity hardening and vulnerability fixesstatus:ready-for-devImplementation can start immediatelyImplementation can start immediatelyStatus: Open.#861 In HendrikReh/projectAlpha;Document production concurrency tuning guidance
documentationImprovements or additions to documentationImprovements or additions to documentationenhancementNew feature or improvementNew feature or improvementperformancePerformance optimization and benchmarkingPerformance optimization and benchmarkingpriority:highImportant; schedule in current sprintImportant; schedule in current sprintrag-serverrag-server crate (Axum REST API)rag-server crate (Axum REST API)status:ready-for-devImplementation can start immediatelyImplementation can start immediatelyStatus: Open.#860 In HendrikReh/projectAlpha;Add pull_request trigger to CI workflow
developer-experienceTooling, DX, and developer workflowTooling, DX, and developer workflowenhancementNew feature or improvementNew feature or improvementGO-LIVERequired for production launchRequired for production launchpriority:criticalMust fix immediately; blocks releaseMust fix immediately; blocks releasestatus:ready-for-devImplementation can start immediatelyImplementation can start immediatelyStatus: Open.Add /readiness probe checking Postgres, Qdrant, and embedding health
backendBackend layer (server, core, storage)Backend layer (server, core, storage)enhancementNew feature or improvementNew feature or improvementGO-LIVERequired for production launchRequired for production launchpriority:criticalMust fix immediately; blocks releaseMust fix immediately; blocks releaserag-serverrag-server crate (Axum REST API)rag-server crate (Axum REST API)reliabilityStability, resilience, and fault toleranceStability, resilience, and fault tolerancestatus:ready-for-devImplementation can start immediatelyImplementation can start immediatelyStatus: Open.docs(code-quality): clarify when tracing macros need clippy::disallowed_methods allows
backendBackend layer (server, core, storage)Backend layer (server, core, storage)code-qualityCode quality and refactoringCode quality and refactoringdeveloper-experienceTooling, DX, and developer workflowTooling, DX, and developer workflowdocumentationImprovements or additions to documentationImprovements or additions to documentationpriority:lowLow urgency; address when convenientLow urgency; address when convenientstatus:ready-for-devImplementation can start immediatelyImplementation can start immediatelyStatus: Open.#856 In HendrikReh/projectAlpha;feat: SBOM Enhancement — SLSA-style full supply chain provenance
enhancementNew feature or improvementNew feature or improvementneeds-decisionBlocked pending architecture or policy decisionBlocked pending architecture or policy decisionpriority:mediumModerate urgency; plan for near-termModerate urgency; plan for near-termprovenanceProvenance tracing and evidence chainsProvenance tracing and evidence chainsrustPull requests that update rust codePull requests that update rust codesecuritySecurity hardening and vulnerability fixesSecurity hardening and vulnerability fixesStatus: Open.