Issues

• Send push token requests after joining and answer them with token lists

  enhancement
  marmot-protocol/mdk#2611 · Filter by author erskingardner opened on Oct 26, 2026
  3

• Tracking: step 5, the lower stack into marmot-session

  tracking-issue
  marmot-protocol/mdk#2602 · Filter by author erskingardner opened on Oct 26, 2026
  4

• Expose resumable messaging-network suspension independent of attachment transfers

  Bindings RelatedenhancementLOW
  Feature

  marmot-protocol/mdk#2600 · Filter by author mubarakcoded opened on Oct 24, 2026

• Plan: one session.sqlite connection per account for catch-up throughput (#2538)

  marmot-protocol/mdk#2590 · Filter by author erskingardner opened on Oct 23, 2026

• Expose why a relay endpoint is refused, including onion endpoints that need Tor

  marmot-protocol/mdk#2588 · Filter by author mubarakcoded opened on Oct 23, 2026

• Simulator nightly failed (2026-10-23)

  marmot-protocol/mdk#2578 · Filter by author github-actions opened on Oct 23, 2026

• Private-file access exposes plaintext send receipt metadata persisted by connector in dev/send-idempotency.json

  confirmed-by:gpt-6-1-solfound-by:nemotron-3-ultrasecurityseverity:low
  marmot-protocol/mdk#2559 · Filter by author dannym-arx opened on Oct 22, 2026

• Build with test-policy-overrides feature relaxes the pinned-v1 policy equality outside unit-test builds in cgka-engine

  confirmed-by:gpt-6-1-solfound-by:nemotron-3-ultrasecurityseverity:low
  marmot-protocol/mdk#2558 · Filter by author dannym-arx opened on Oct 22, 2026

• Installer-delivery compromise can execute code as the developer through the uv pipe-to-shell in hermes_marmot_dev_setup.sh while CI uses a SHA-pinned action

  confirmed-by:gpt-6-1-solfound-by:muse-spark-openfound-by:nemotron-3-ultrasecurityseverity:low
  marmot-protocol/mdk#2557 · Filter by author dannym-arx opened on Oct 22, 2026

• Failed trailing write, crash, or migration can silently clear pending group consent when a missing projection is reconstructed as Accepted in marmot-app reconciliation

  confirmed-by:gpt-6-1-solfound-by:muse-spark-openfound-by:nemotron-3-ultrasecurityseverity:low
  marmot-protocol/mdk#2556 · Filter by author dannym-arx opened on Oct 22, 2026

• Upstream tag-delivery compromise can inject content through mutable agent and dev-service image tags in Dockerfiles and docker-compose

  confirmed-by:gpt-6-1-solfound-by:muse-spark-openfound-by:nemotron-3-ultrasecurityseverity:low
  marmot-protocol/mdk#2555 · Filter by author dannym-arx opened on Oct 22, 2026

• Same-UID writer redirects media-store truncation via symlink followed on later opens in crates/media-store

  confirmed-by:gpt-6-1-solfound-by:muse-spark-openfound-by:nemotron-3-ultrasecurityseverity:low
  marmot-protocol/mdk#2554 · Filter by author dannym-arx opened on Oct 22, 2026

• Amplified compromise of hermes/openclaw agent containers via missing USER directive in agent Dockerfiles

  confirmed-by:gpt-6-1-solfound-by:muse-spark-openfound-by:nemotron-3-ultrasecurityseverity:low
  marmot-protocol/mdk#2553 · Filter by author dannym-arx opened on Oct 22, 2026

• Authenticated group members grow the local timeline database via missing plaintext and tag size bound at the persistence seam

  confirmed-by:gpt-6-1-solfound-by:muse-spark-openfound-by:nemotron-3-ultrasecurityseverity:medium
  marmot-protocol/mdk#2552 · Filter by author dannym-arx opened on Oct 22, 2026

• Expose group creation through the wn-agent CLI

  enhancement
  Feature

  marmot-protocol/mdk#2551 · Filter by author Datawav opened on Oct 22, 2026

• CI: oversized_event_exhausts_byte_budget_without_retention reads relay counters before the second send lands

  marmot-protocol/mdk#2543 · Filter by author erskingardner opened on Oct 22, 2026

• CI: queue-crossing replay hits receive deadline

  marmot-protocol/mdk#2538 · Filter by author dannym-arx opened on Oct 21, 2026
  13

• Preserve incoming reply context in terminal agent prompts

  bug
  Bug

  marmot-protocol/mdk#2537 · Filter by author Datawav opened on Oct 21, 2026

• CI: nextest archive extraction fails before tests

  marmot-protocol/mdk#2536 · Filter by author dannym-arx opened on Oct 21, 2026

• Verify live directory event identity independently of SDK ID-cache hits

  bugMEDIUMsecurity
  marmot-protocol/mdk#2521 · Filter by author Datawav opened on Oct 21, 2026

• Preserve pasted profile-reference ranges in durable composer drafts

  enhancementMEDIUM
  Feature

  marmot-protocol/mdk#2515 · Filter by author mubarakcoded opened on Oct 21, 2026

• Gate automatic attachment acquisition by explicit trusted sender identities

  enhancement
  Feature

  marmot-protocol/mdk#2512 · Filter by author Datawav opened on Oct 20, 2026

• Expose upload destination refusal as a typed error

  marmot-protocol/mdk#2508 · Filter by author mubarakcoded opened on Oct 20, 2026

• Don't renew usage-diagnostics consent for additive host aggregate schemas

  marmot-protocol/mdk#2507 · Filter by author mubarakcoded opened on Oct 20, 2026

• Stored replay intermittently stops at 128 deliveries

  marmot-protocol/mdk#2506 · Filter by author dannym-arx opened on Oct 20, 2026