All issues

Search results

Replace the admin-key session cookie with an opaque server-side session (F04 follow-up)

Status: Open.

#525 In try-hola/hola;

· pofallon opened on Sep 22, 2026

CI: the "Local Testing" workflow fails intermittently on single real-filesystem tests — two instances, and one looks like F15

Status: Open.

#524 In try-hola/hola;

· pofallon opened on Sep 22, 2026

F02 left privileged: true as a warning — two catalog apps need it and nothing can grant it

Status: Open.

#522 In try-hola/hola;

· pofallon opened on Sep 22, 2026

runContractBackupPrepare re-implements the fail-closed pre-hook loop that runPreHooksFailClosed owns

Status: Open.

#521 In try-hola/hola;

· pofallon opened on Sep 22, 2026

No per-grant consent revocation exists platform-wide (backup@1 and restore@1 both)

Status: Open.

#500 In try-hola/hola;

· pofallon opened on Sep 21, 2026

Restoring a restore@1 provider from its own captures is circular — track the limitation

Status: Open.

#499 In try-hola/hola;

· pofallon opened on Sep 21, 2026

brokerActivity()'s Real override is hardcoded per-contract-ref — consider a per-contract-defined shape

Status: Open.

#498 In try-hola/hola;

· pofallon opened on Sep 21, 2026

Generalise the brokered-contract state-store pattern once a third one appears

Status: Open.

#497 In try-hola/hola;

· pofallon opened on Sep 21, 2026

All installed apps share one Docker network with the platform API and Authentik's database

Status: Open.

#480 In try-hola/hola;

· pofallon opened on Sep 20, 2026

spec 006: env.json secret exposure surfaces the FR-014 justification never covers

Status: Open.

#478 In try-hola/hola;

· pofallon opened on Sep 20, 2026

No operator-facing surface reports an unattributed app data root

Status: Open.

#476 In try-hola/hola;

· pofallon opened on Sep 20, 2026

MockStorageService discards file modes, forcing mode-sensitive tests onto the real-filesystem harness

Status: Open.

#475 In try-hola/hola;

· pofallon opened on Sep 20, 2026