Issues

• Minor polish: 303 + Retry-After:0 busy-loops naive clients; no HTTP cancel endpoint; misc nits

  enhancement
  ecmwf/bits-broker#47 · Filter by author jameshawkes opened on Jun 10, 2026

• bits-py: remove redundant unsafe Send/Sync impls; per-call asyncio.run() is correct but heavy

  enhancement
  ecmwf/bits-broker#46 · Filter by author jameshawkes opened on Jun 10, 2026

• Deduplicate Bits::submit_with_state and RouteHandle::submit (divergence already caused the max_jobs drift bug)

  enhancement
  ecmwf/bits-broker#45 · Filter by author jameshawkes opened on Jun 10, 2026

• BrokerSlotStore blanket impl uses Any-downcast to known backends, defeating persistence pluggability

  enhancement
  ecmwf/bits-broker#44 · Filter by author jameshawkes opened on Jun 10, 2026

• Broker slot exhaustion: every restart consumes a u16 slot; crash loops burn the space in days

  enhancement
  ecmwf/bits-broker#43 · Filter by author jameshawkes opened on Jun 10, 2026

• Shutdown can block up to broker_lease_ttl in Drop; NATS init panics on current-thread runtimes

  bug
  ecmwf/bits-broker#42 · Filter by author jameshawkes opened on Jun 10, 2026

• WorkerServer::ensure_started: sticky failure after bind error, and start race between concurrent registrations

  bug
  ecmwf/bits-broker#41 · Filter by author jameshawkes opened on Jun 10, 2026

• max_jobs accounting drift: RouteHandle submissions don't increment job_count but their removal decrements it

  bug
  ecmwf/bits-broker#40 · Filter by author jameshawkes opened on Jun 10, 2026

• Worker crash permanently fails the job — no requeue/redelivery on heartbeat eviction

  enhancement
  ecmwf/bits-broker#39 · Filter by author jameshawkes opened on Jun 10, 2026

• Consuming GET /job/{id} semantics: results destroyed on read, fragile against HTTP retry/proxy behaviour

  enhancement
  ecmwf/bits-broker#38 · Filter by author jameshawkes opened on Jun 10, 2026

• Proxied redirect results lost when Location ends with the job ID (pending-vs-result discrimination is a URL heuristic)

  bug
  ecmwf/bits-broker#37 · Filter by author jameshawkes opened on Jun 10, 2026

• Post-completion re-execution: async durable cleanup leaves a window where a late poll replays the whole job

  bug
  ecmwf/bits-broker#36 · Filter by author jameshawkes opened on Jun 10, 2026

• Double execution: concurrent polls can both claim and resubmit the same recovered job (TOCTOU in claim path)

  bug
  ecmwf/bits-broker#35 · Filter by author jameshawkes opened on Jun 10, 2026

• Recovery livelock: job unrecoverable after a second owner failure (claim always uses slot-derived expected owner)

  bug
  ecmwf/bits-broker#34 · Filter by author jameshawkes opened on Jun 10, 2026

• Security posture: upstream 4xx bodies relayed verbatim to clients; no TLS; no rate limiting

  security
  ecmwf/bits-broker#33 · Filter by author jameshawkes opened on Jun 10, 2026

• Security: poll proxying trusts lease-store URLs (SSRF if store compromised); broker-to-broker polls will need their own credential

  security
  ecmwf/bits-broker#32 · Filter by author jameshawkes opened on Jun 10, 2026

• Security: job ID is the only capability for result retrieval, with only 40 bits of entropy

  security
  ecmwf/bits-broker#31 · Filter by author jameshawkes opened on Jun 10, 2026

• Security: worker server is unauthenticated and binds 0.0.0.0 by default — jobs can be stolen and results forged

  security
  ecmwf/bits-broker#30 · Filter by author jameshawkes opened on Jun 10, 2026