Code

UI/UX Issues in Channel Removal Flow (Observed on WeChat)

Surface conclude_node_migration failure cause in node logs

bug(setup): wizard's sandbox image check bypasses SANDBOX_IMAGE env precedence, always probes the hardcoded default

feat: trait-level grant expiry enforcement + binding-store tenant-scoping (attested-signing durable-store follow-ups)

feat: non-consuming background-subagent result poll + durable parent/child index (follow-up to #4084 Gap 2)

[Security] Stop unwrapping SecretString into String on the credential path

[Security] Signer approval gate should not be Optional

Attested-signing: harden custodial-mainnet KMS fail-closed guard

Attested-signing: TrustEnrollment ceremony + connected-wallet trust registration

[tracking] Attested-signing: multi-tenant operational model (per-tenant config + key/credential lifecycle)

Improve Credit / Rate Limit Transparency and Prevent Token Consumption on Failed Requests

rust-launcher: apply common.sh dedup to deploy-tee-cluster.sh

Feature Request: Custom Telegram API Host

[QA] Discord channel stops replying while ironclaw stays active with tokio workers pinned at 100% CPU

Durably enforce tool-execution invariants: audited single funnel + deny-by-default config + CI boundary tests

Interactive chat tool calls bypass ToolDispatcher::dispatch (no ActionRecord audit, no channel tool-filter)

Reborn GSuite: add shim and live harness coverage

[Reborn] Standalone composition root doesn't wire hooked-prompt deps (gate-ref factory / capability input resolver) under HOOKS_ENABLED

[hooks] SecurityAuditSink adoption at remaining boundary call sites

[hooks] Third-party activation hardening follow-ups (#3951/#3934)

[hooks] FS-hardening follow-up: RESOLVE_NO_XDEV bind-mount containment

Rename CLAUDE.md to something more semantic

RFC: Add canonical OpenAPI/AsyncAPI contracts for Gateway, WebUI, and event surfaces

[QA] `select_archive_for_arch()` and `download_binary_and_run_installer()` functions are brokwn in installer script for macOS/Linux since 0.26, a month ago

Harden LocalFilesystem: honor CAS::Absent + durable writes (atomic rename + fsync)

Pattern: default-to-no-op guardrails get silently bypassed (3 instances across reborn-integration PRs)

Make a scan to add zeroizeondrop

Reminder: Replace Base58CryptoHash newtype with serde_with v3.20.0 Base58 support

subagent E2E §5.2: blocking spawn parent recovers after child completion

Track block time to measure signature response time