Code

Admin panel: API-token re-issue is missing, and user-detail still shows an orphaned "Create Token" button

Routine fails on every scheduled run with "No thread attached"

Slack disconnect request is incorrectly rejected by agent

Raise WebChat attachment file-count limit and surface overflow errors

Daily ironclaw failure taxonomy — 2026-07-08

Expose OpenRouter upstream provider on ToolCompletionResponse

Long-output prompt causes repeated model timeouts, degraded into generic "invalid result" error

Daily ironclaw failure taxonomy — 2026-07-07

Document in RELEASES.md that operators must upgrade after voting in a new image hash

Reborn harness: auth-resolution real dispatch arm (submit_inbound AuthResolution) unreachable — needs OAuth-gated-capability profile enabler

Effective context budget is a hardcoded 128K that ignores the model's `context_length` and has no config override

perf(reborn): pass-2 hot-path audit — tracking issue (7 findings + follow-ups)

Official installers 404: download URLs use tag `v{version}` but releases are tagged `ironclaw-v{version}`

Reborn: production turn-state filesystem uses with_fixed_view (single-owner) — per-user /turns collapses on multi-user boxes (defense-in-depth + CAS contention)

Wiring-parity guard: extend EXPECTED_PRODUCTION_SHAPE to projection and interaction-service assembly

reborn: verify driver-supplied failure safe_summary against host evidence in validate_failed_exit

Routine creation response exposes internal implementation details

GitHub issue search and create capabilities fail with HTTP 403

Activity panel hides tool details and does not update during active run

Re-think the node upgrade process so a supported node can't silently fall out of the whitelist

Investigate why the 2026-07-03 mainnet resharing failed to conclude

Add sandbox coverage and a stub verifier for async TEE attestation

perf(agent_loop): per-turn LoopExecutionState and capability-candidate clones

perf(wasm): component linker rebuilt on every instantiation

perf(conversations): full conversation state cloned + serialized on every inbound message

perf(llm): tool schemas deep-cloned and re-normalized on every LLM request

perf(event_projections): snapshot replays event stream to head on every call — materialize run state

Slack least-privilege: reduce OAuth grant for read-only users (write opt-in)

Slack personal OAuth: per-capability scope split (read vs chat:write opt-in)

Bridged tool disclosure + narrowed capability allowlist strips the bridge meta-tools (latent)