All issues

intake review: the gate lets the no-known-allergies attestation and confirmed allergy rows both be true

#667

· aks129 opened

on Sep 6, 2026

$extract: _set_path writes Patient.telecom as a scalar and address.line as a dict, and appends given rather than replacing

#666

· aks129 opened

on Sep 6, 2026

test_access_kernel: the has_grant call-site allowlist is keyed by line number, so any edit above a listed call goes red

#660

· aks129 opened

on Sep 6, 2026

human gate: on the push path the approved-payload digest is taken at tap time, not when the summary was shown

#659

· aks129 opened

on Sep 6, 2026

Ruling: a reason-carrying, non-raising kernel surface for the three step-up sites that publish the refusal reason

#655

· aks129 opened

on Sep 6, 2026

Kernel slice 7b: where does the audit row on a refused $ingest-context live once the gate moves into the kernel?

#648

· aks129 opened

on Sep 6, 2026

prod-watch: deployed build is stale

#644

· github-actions opened

on Sep 5, 2026

Definition of done item 4 reads 0 of 3: none of the tolerated gaps has an owner or a date

#640

· aks129 opened

on Sep 5, 2026

CareAgents guard census: the no-PHI non-negotiable has zero content inspection, and 8 more

#638

· aks129 opened

on Sep 5, 2026

The default test suite calls the public internet at import time, and its skip guard is a point-in-time check

#635

· aks129 opened

on Sep 5, 2026

Security-file guard census: 8 more demonstrated gaps, incl. an SSRF enforcement point that deletes with the suite green

#634

· aks129 opened

on Sep 5, 2026

Make the MUTATION docstrings executable, because care alone has now failed three times

#633

· aks129 opened

on Sep 5, 2026