Code

reborn: verify driver-supplied failure safe_summary against host evidence in validate_failed_exit

Routine creation response exposes internal implementation details

GitHub issue search and create capabilities fail with HTTP 403

Activity panel hides tool details and does not update during active run

perf(agent_loop): per-turn LoopExecutionState and capability-candidate clones

perf(wasm): component linker rebuilt on every instantiation

perf(conversations): full conversation state cloned + serialized on every inbound message

perf(llm): tool schemas deep-cloned and re-normalized on every LLM request

perf(event_projections): snapshot replays event stream to head on every call — materialize run state

Slack least-privilege: reduce OAuth grant for read-only users (write opt-in)

Slack personal OAuth: per-capability scope split (read vs chat:write opt-in)

Bridged tool disclosure + narrowed capability allowlist strips the bridge meta-tools (latent)

Wiring-parity guard: EXPECTED_PRODUCTION_SHAPE is hand-derived — add a production-side shape accessor

ci(reborn): flip integration-tier coverage report from informational to ratchet

CI: job-level `if` skips block Railway deploys (Wait for CI)

ironclaw_reborn_identity: login seam (OAuth route → WebuiUserDirectory → resolver) is tested only with fakes on both sides

ironclaw_reborn_identity: adopt_migrated_identity never writes StoredUser and reverses the index/identity write order

ironclaw_reborn_identity: bind() has no OAuth-surface guard (defense-in-depth)

ironclaw_reborn_identity: cross-process divergent-email logins can split a principal

reborn: retry path is unreachable for local-dev synthetic capabilities — reused input_ref fails staging check, collapsing retry contract into terminal driver_unavailable

reborn: memory prompt-context injection is unwired — ProductionMemoryPromptContextService never composed, memory_snippets always empty

CI red on main after engine-v2 removal: Docker Build missing prompts COPY + Clippy Windows unused import

Can't connect Slack from chat

Daily ironclaw failure taxonomy — 2026-07-03

reborn: force_compact_on_next_iteration is a dead letter — ActiveTaskPreservingCompactionStrategy never reads the overflow flag

reborn: skill trust ceiling (attenuate_tools) never ported — Installed skills do not narrow the tool surface

feat(reborn): stable OAuth auth-relay callback so every PR preview can test Google SSO

Vision model hallucinates image contents and accepts false user corrections

Approval notifications disappear instead of remaining in notification history

Automation posts intermediate progress message to Slack instead of final result