-
-
Notifications
You must be signed in to change notification settings - Fork 37
Pull requests: jaylfc/taOS
Author
Label
Projects
Milestones
Reviews
Assignee
Sort
Pull requests list
Dispatcher: park a card PERMANENTLY after N cumulative failed dispatches, not per-48h window
#2736
opened Sep 2, 2026 by
jaylfc
Owner
Loading…
SECURITY/RELEASE BLOCKER: cryptography 48.0.1 has 3 CVEs, pinned <49.0 by litellm[proxy]
#2735
opened Sep 2, 2026 by
jaylfc
Owner
Loading…
Migration guards miss the commonest case: columns added to SCHEMA with NO migration at all
#2734
opened Sep 2, 2026 by
jaylfc
Owner
Loading…
CHANGELOG fragments: stop every concurrent PR conflicting on the same Unreleased anchor
#2733
opened Sep 2, 2026 by
jaylfc
Owner
Loading…
beta.46 bot-review follow-ups: inert monkeypatch in lists concurrency test + em dash in test hint
#2732
opened Sep 2, 2026 by
jaylfc
Owner
Loading…
AUDIT [memory-taosmd]: deep read-only security+correctness pass
#2731
opened Sep 2, 2026 by
jaylfc
Owner
Loading…
Audit lane: add an adversarial-verify stage (refute each finding vs code) before findings become cards
#2730
opened Sep 2, 2026 by
jaylfc
Owner
Loading…
AUDIT [a2a-comms]: deep read-only security+correctness pass
#2728
opened Sep 2, 2026 by
jaylfc
Owner
Loading…
AUDIT [observatory-audit]: deep read-only security+correctness pass
#2727
opened Sep 2, 2026 by
jaylfc
Owner
Loading…
AUDIT [cluster-workers]: deep read-only security+correctness pass
#2726
opened Sep 2, 2026 by
jaylfc
Owner
Loading…
docs(specs): LoRa spec — fold CodeRabbit round 2 on #2721 (regulatory override pins, 28 dBm max vs configured tx_power, per-radio duty budget)
lead-reviewed
#2725
opened Sep 2, 2026 by
jaylfc
Owner
Loading…
fold #2719 (tsk-yn5gze): versions API mis-parses every auto-commit (committer subject contains the
| delimiter); revert-to-HEAD returns 404; committer dies with the container; + 8 CodeRabbit and 8 kilo findings (ssh keys in history, ancestor/dirty-tree checks, deploy reports success on failed setup)
#2724
opened Sep 2, 2026 by
jaylfc
Owner
Loading…
AUDIT [auth-identity]: deep read-only security+correctness pass
#2723
opened Sep 2, 2026 by
jaylfc
Owner
Loading…
SECURITY: notifications read paths ignore user_id — list/list_archived/unread_count return every user's rows and per-id read/dismiss/archive act cross-user (CWE-862, found on #2716 review)
lead-blocked
Lead has blocked this PR; gate_merge.sh refuses at exit 10.
#2722
opened Sep 2, 2026 by
jaylfc
Owner
Loading…
fold #2717 (tsk-4vogow): revert API inverts one commit instead of restoring the snapshot; sha unvalidated before git argv (CWE-88); trace dir committed into agent history (CWE-200); remote container target not persisted
lead-blocked
Lead has blocked this PR; gate_merge.sh refuses at exit 10.
#2719
opened Sep 2, 2026 by
jaylfc
Owner
Loading…
fold CodeRabbit findings on #2714 (tsk-fjmxzo): Agent state versioning: git-in-container with auto-commit + history/revert API
lead-blocked
Lead has blocked this PR; gate_merge.sh refuses at exit 10.
#2717
opened Sep 2, 2026 by
jaylfc
Owner
Loading…
Agent state versioning: git-in-container with auto-commit + history/revert API
lead-blocked
Lead has blocked this PR; gate_merge.sh refuses at exit 10.
#2714
opened Sep 2, 2026 by
jaylfc
Owner
Loading…
fix-forward #2697: agent-desktop still hardcodes a 'testpass' VNC password, reports OK from a backgrounded shell that never checks Xvfb/x11vnc actually started, and has no owner check on any handler
lead-blocked
Lead has blocked this PR; gate_merge.sh refuses at exit 10.
#2700
opened Sep 2, 2026 by
jaylfc
Owner
Loading…
fix-forward #2663: agent-desktop D1 fails CI on the routes-doc size budget, ships a hardcoded 'testpass' VNC password, and reports the desktop running off a bare 'echo OK' rather than x11vnc actually binding
lead-blocked
Lead has blocked this PR; gate_merge.sh refuses at exit 10.
#2697
opened Sep 2, 2026 by
jaylfc
Owner
Loading…
Push payload: image + approve/reject/note actions (blocked on native shell)
lead-blocked
Lead has blocked this PR; gate_merge.sh refuses at exit 10.
#2694
opened Sep 1, 2026 by
jaylfc
Owner
Loading…
Agent terminal conduit D1: tuiui apphost socket client in the controller (spawn/input/roster/grid-read/kill)
lead-blocked
Lead has blocked this PR; gate_merge.sh refuses at exit 10.
#2691
opened Sep 1, 2026 by
jaylfc
Owner
Loading…
feat(collab): agent delegation handshake + sponsor_contact_id + cascades (D1)
lead-blocked
Lead has blocked this PR; gate_merge.sh refuses at exit 10.
#2048
opened Jul 19, 2026 by
hognek
Contributor
Loading…
feat(worker): self-update install, restart, health-check, and rollback (#890 C3)
lead-blocked
Lead has blocked this PR; gate_merge.sh refuses at exit 10.
#1910
opened Jul 17, 2026 by
hognek
Contributor
Loading…
ProTip!
Filter pull requests by the default branch with base:master.