Code

products-tier: ironclaw_extension_manager still holds a direct ironclaw_secrets edge (§8.2)

§11.2.7: seventeen cross-crate include_str! sites remain, owned by three lanes that are not the WS2 row

WS8: three callerless public builder methods on HostRuntimeServices

Reborn PR test planner hard-fails on Dockerfile, .githooks/, .claude/, crates/AGENTS.md, test-tools/ and two scripts/ gates

Stale guidance: .claude/commands/add-tool.md targets the deleted tools-src/ tree

check-version-bumps.sh silently skips the WIT_TOOL_VERSION cross-check on macOS (BSD sed has no \+)

Coverage is dark for the entire crates/extensions/ family — CRATE_RE still requires a crate directly under crates/

builtin.skill_install: inline multi-file installs are unreachable, and url installs silently drop files/source/source_url

Docker fail-closed test gate is wired to nothing (IRONCLAW_REQUIRE_DOCKER_TESTS never set)

Shared-vendor OAuth scope ceiling is store-wide, not caller-scoped

Agent ignores follow-up question after failed run

Multi-tool meeting research fails after retrieving calendar data

Agent exposes internal implementation details in user-facing response

Telegram messages render raw Markdown instead of formatted text

Hosted MCP: omitted destructiveHint is read as false, but the MCP spec defaults it to true

[QA] Platform-owned WIT and extension package changes fail the Reborn scope classifier

Configure all tools, channels, and extensions from AI chat as an Admin

Telegram voice notes and stickers fail the entire update parse (InvalidExternalRef)

Design System — Phase 2: DESIGN.md governance & guidelines

[QA] WASM guest diagnostics can expose detectable secrets through runtime, model causes, and tracing

Model budget enforcement is not wired in production — daily USD caps unenforced since #6174

[QA] Failed lazy delivery recovery is not retried within a coordinator lifetime

[QA] Report host-mediated egress ignoring ambient proxy variables in operator diagnostics

[QA] Concurrent coordinators can both send the same durable delivery attempt

[QA] Interrupted-delivery recovery can overwrite a concurrent Delivered status

[QA] Ambient proxy env vars bypass DNS-rebinding protection in ReqwestNetworkTransport

Time awareness without prompt-cache churn: append-only rollover context and duration evidence

extension_manager: five pre-existing findings surfaced by the WS2.4 split (false WriteFilesystem effect, untested lock predicate, two missing dispatch tests, six dropped causes)

WS5: close the attachments row — re-word §6.4.9 to exclude the read adapter, or re-home LoopAttachmentReadPort first

Split the product_wire DTO family in ironclaw_product_contracts (large_file exemption owner)