Issues

• Membership-aware divergence uses activity windows instead of MLS membership events

  bugMEDIUM
  Bug

  marmot-protocol/goggles#349 · Filter by author Datawav opened on Sep 2, 2026

• Support MDK epoch-stall backfill lifecycle audit rows

  enhancementMEDIUM
  marmot-protocol/goggles#338 · Filter by author agent-p1p opened on Aug 11, 2026

• Convergence projection collapses reused explicit run IDs after engine restart

  bugHIGH
  marmot-protocol/goggles#334 · Filter by author Datawav opened on Jul 29, 2026

• Actions view merges unrelated reused operation IDs across engines and restarts

  bugMEDIUM
  marmot-protocol/goggles#333 · Filter by author Datawav opened on Jul 29, 2026
  2

• Allow personal access tokens to enumerate readable groups for watchdogs

  agent-okenhancementMEDIUM
  marmot-protocol/goggles#331 · Filter by author Datawav opened on Jul 29, 2026

• Group-ID search result count is not announced to screen readers (count span is not an aria-live region)

  bugLOW
  marmot-protocol/goggles#328 · Filter by author erskingardner opened on Jul 22, 2026

• Engine "Account" cell renders a spurious "–" placeholder for an npub-only engine (group_overview empty-guard omits account_npubs)

  bugLOW
  marmot-protocol/goggles#327 · Filter by author erskingardner opened on Jul 22, 2026

• AuditGroupAdmin change form leaves identity-critical group_ref and derived divergent_message_count editable — a Save can split a group's evidence or fabricate its divergence badge

  bugMEDIUMsecurity
  marmot-protocol/goggles#326 · Filter by author erskingardner opened on Jul 22, 2026

• Streaming group export is a non-atomic multi-query read: concurrent ingest mid-stream yields an internally inconsistent aggregate (events referencing sources not emitted)

  bugMEDIUM
  marmot-protocol/goggles#325 · Filter by author erskingardner opened on Jul 21, 2026

• delivery_observation_payload computes evidence_refs_payload(observation.evidence_events) twice per observation (redundant reverse()/dict work)

  LOWperformance
  marmot-protocol/goggles#324 · Filter by author erskingardner opened on Jul 21, 2026

• ConvergenceRuleEvaluation.sequence restarts at 0 for each convergence_decision event, so a run spanning multiple decisions gets colliding sequences and an interleaved rule trace

  bugLOW
  marmot-protocol/goggles#323 · Filter by author erskingardner opened on Jul 21, 2026

• copy_publish_fields silently drops a scalar relay_url when the relay_urls key is present-but-null/empty, losing relay attribution from the normalized projection

  bugLOW
  marmot-protocol/goggles#322 · Filter by author erskingardner opened on Jul 21, 2026

• send_outcome with explicit-null outbound_welcome_msg_ids is falsely quarantined, flipping a valid AuditFile to INVALID

  bugMEDIUM
  marmot-protocol/goggles#321 · Filter by author erskingardner opened on Jul 21, 2026

• GOGGLES_EXPORTS_ENABLED kill-switch only gates the NDJSON stream; group_agent_export and api_group_projections?download=1 still serve full-group exports

  MEDIUMsecurity
  marmot-protocol/goggles#320 · Filter by author erskingardner opened on Jul 21, 2026

• api_message_detail's per-group delivery_identity_index cache never works: dict.setdefault eagerly recomputes the full-group scan for every matched artifact

  bugMEDIUMperformance
  marmot-protocol/goggles#319 · Filter by author erskingardner opened on Jul 21, 2026

• validate_audit_schema crashes with an uncaught IsADirectoryError when a path argument is a directory

  bugLOW
  marmot-protocol/goggles#315 · Filter by author erskingardner opened on Jul 20, 2026

• docker-compose web service has no stop_grace_period, so a 10s SIGKILL truncates in-flight streaming exports / ingests despite the 300s worker timeout

  MEDIUM
  marmot-protocol/goggles#314 · Filter by author erskingardner opened on Jul 20, 2026

• env_bool() does not strip its value and fails open, silently disabling security cookie flags on a whitespace/quote-polluted env var

  LOWsecurity
  marmot-protocol/goggles#313 · Filter by author erskingardner opened on Jul 20, 2026

• rebuild_file_projections re-scans all of the upload's events without distinct() just to collect group ids, on the ingest hot path

  LOWperformance
  marmot-protocol/goggles#312 · Filter by author erskingardner opened on Jul 20, 2026

• project_delivery_observation writes one event's delivery state onto the DeliveryObservation of every message the event merely references (invalidated_msg_id / human_action_message_ids)

  bugMEDIUM
  marmot-protocol/goggles#311 · Filter by author erskingardner opened on Jul 20, 2026

• convergence_run_payload never passes audit_data_modes to sensitivity_payload, so convergence rows always report contains_full_data: false

  LOWsecurity
  marmot-protocol/goggles#310 · Filter by author erskingardner opened on Jul 20, 2026

• epoch_transition_payload omits the entire sensitivity block, unlike every sibling projection row builder

  bugMEDIUMsecurity
  marmot-protocol/goggles#309 · Filter by author erskingardner opened on Jul 20, 2026

• update_run_from_event forces a redundant ConvergenceRun.save() on every convergence event: phase (and inferred) set changed=True without comparing to the stored value

  LOWperformance
  marmot-protocol/goggles#308 · Filter by author erskingardner opened on Jul 19, 2026

• save_invalid_upload persists the whole upload body twice (AuditFile.raw_text + a single AuditEvent.raw_line), doubling storage/write for every whole-file quarantine

  LOWperformance
  marmot-protocol/goggles#307 · Filter by author erskingardner opened on Jul 19, 2026

• PersonalAccessToken.issue() does not handle token_prefix collisions (uncaught IntegrityError under the unique constraint) — the PAT sibling of #197

  bugLOW
  marmot-protocol/goggles#306 · Filter by author erskingardner opened on Jul 18, 2026