All issues

Search results

Repo health: say how many repos merge on their own green, and name the two dark-factory findings

Status: Open.

#85 In bounded-systems/desk;

· bdelanghe opened on Sep 8, 2026

No link-preview metadata on a dashboard whose main affordance is being linked

Status: Open.

#80 In bounded-systems/desk;

· bdelanghe opened on Sep 3, 2026

No Strict-Transport-Security, and the CSP has no reporting endpoint

Status: Open.

#79 In bounded-systems/desk;

· bdelanghe opened on Sep 3, 2026

Every unknown path on desk.bounded.tools returns 200 with the full board, including /favicon.ico

Status: Open.

#78 In bounded-systems/desk;

· bdelanghe opened on Sep 3, 2026

desk says "248 claimable"; the page it links to shows 256 and 25, and never 248

Status: Open.

#77 In bounded-systems/desk;

· bdelanghe opened on Sep 3, 2026

The overview's Claims and PRs panels are an alphabetical prefix presented as a summary

Status: Open.

#76 In bounded-systems/desk;

· bdelanghe opened on Sep 3, 2026

/subscribe stores any https endpoint from an anonymous caller — #13's "no client input reaches the outbound fetch" does not hold on the push path

Status: Open.

#75 In bounded-systems/desk;

· bdelanghe opened on Sep 3, 2026

/pending is unauthenticated and publishes a rolling log of privileged infra approvals

Status: Open.

#74 In bounded-systems/desk;

· bdelanghe opened on Sep 3, 2026

A spent ceremony leaves a live-looking prompt on the phone — the notification outlives the thing it points at

Status: Open.

#71 In bounded-systems/desk;

· bdelanghe opened on Sep 3, 2026

The board is not scannable: machine-generated titles dominate it, and every row carries the same weight

Status: Open.

#61 In bounded-systems/desk;

· bdelanghe opened on Aug 30, 2026

Design: drive the board from a webhook-fed state machine in Cloudflare, not a cron-published snapshot

Status: Open.

#22 In bounded-systems/desk;

· bdelanghe opened on Aug 29, 2026

Pin the invariant that a client cannot cache-bust to origin, or steer the Worker's outbound fetch

Status: Open.

#13 In bounded-systems/desk;

· bdelanghe opened on Aug 28, 2026