-
Notifications
You must be signed in to change notification settings - Fork 5
All issues
Issue creation is restricted in this repository
Issues
is:issue state:open
is:issue state:open
Search results
Low: three hardening observations in gateway/OAuth/subagent trust boundaries
P3Research — medium-high complexityResearch — medium-high complexitysecuritySecurity-related issueSecurity-related issueStatus: Open.#6550 In bug-ops/zeph;no per-message usage/cost tracking — only session/daily aggregate, TTFT and tok/s are ephemeral UI state
enhancementNew feature or requestNew feature or requestP3Research — medium-high complexityResearch — medium-high complexityStatus: Open.#6549 In bug-ops/zeph;durable.rs key-material loaders (load_write_hwm_key/hmac_key/cipher/integrity_seal) hardcode default_vault_dir(), ignore --vault-key/--vault-path
P3Research — medium-high complexityResearch — medium-high complexitytech-debtTechnical debtTechnical debtStatus: Open.#6548 In bug-ops/zeph;history-chain integrity bootstrap ignores --vault-key/--vault-path, making doctor's integrity.anchor OK a false positive
bugSomething isn't workingSomething isn't workingP1High ROI, low complexity — do next sprintHigh ROI, low complexity — do next sprintsecuritySecurity-related issueSecurity-related issueStatus: Open.#6547 In bug-ops/zeph;zeph-acp: ZephAcpAgentState is a god-object spanning 6 unrelated responsibilities
architectureArchitecture improvementsArchitecture improvementsP2High value, medium complexityHigh value, medium complexitytech-debtTechnical debtTechnical debtStatus: Open.#6546 In bug-ops/zeph;parity(subagent): no cumulative session-wide cap on total subagent spawns
P3Research — medium-high complexityResearch — medium-high complexityresearchResearch-driven improvementResearch-driven improvementsub-agentsSub-agent orchestrationSub-agent orchestrationStatus: Open.#6545 In bug-ops/zeph;feat(channels): adopt Telegram Bot API 10.1/10.2 rich-text formatting and fix guest-mode escaping
channelszeph-channels crate (Telegram)zeph-channels crate (Telegram)enhancementNew feature or requestNew feature or requestP1High ROI, low complexity — do next sprintHigh ROI, low complexity — do next sprintStatus: Open.#6541 In bug-ops/zeph;subagent: composition test for inherited_tool_allowlist bypasses the real handle_scheduler_spawn_action wiring
P3Research — medium-high complexityResearch — medium-high complexitytech-debtTechnical debtTechnical debtStatus: Open.#6539 In bug-ops/zeph;zeph-agent-tools: re-evaluate AgentChannel dispatcher-extraction plan if revived
P4Long-term / exploratoryLong-term / exploratoryresearchResearch-driven improvementResearch-driven improvementStatus: Open.#6536 In bug-ops/zeph;zeph-skills: broken intra-doc links to Self::Qdrant when qdrant feature is disabled
docsDocumentationDocumentationP3Research — medium-high complexityResearch — medium-high complexityStatus: Open.#6533 In bug-ops/zeph;zeph-channels: MAX_RETRY_SECS has no compile-time finite/non-negative invariant guard
P3Research — medium-high complexityResearch — medium-high complexitysecuritySecurity-related issueSecurity-related issueStatus: Open.#6517 In bug-ops/zeph;research(memory): no consent gate or visible disclosure before durable memory writes from untrusted external content (MemGhost pattern)
memoryzeph-memory crate (SQLite)zeph-memory crate (SQLite)P2High value, medium complexityHigh value, medium complexityresearchResearch-driven improvementResearch-driven improvementsecuritySecurity-related issueSecurity-related issueStatus: Open.#6490 In bug-ops/zeph;