Code

Long-output prompt causes repeated model timeouts, degraded into generic "invalid result" error

Daily ironclaw failure taxonomy — 2026-07-07

Document in RELEASES.md that operators must upgrade after voting in a new image hash

fix(reborn): distinguish transient model-provider network errors (stop silent empty turns)

Reborn harness: auth-resolution real dispatch arm (submit_inbound AuthResolution) unreachable — needs OAuth-gated-capability profile enabler

Effective context budget is a hardcoded 128K that ignores the model's `context_length` and has no config override

perf(reborn): pass-2 hot-path audit — tracking issue (7 findings + follow-ups)

Official installers 404: download URLs use tag `v{version}` but releases are tagged `ironclaw-v{version}`

Reborn: production turn-state filesystem uses with_fixed_view (single-owner) — per-user /turns collapses on multi-user boxes (defense-in-depth + CAS contention)

Wiring-parity guard: extend EXPECTED_PRODUCTION_SHAPE to projection and interaction-service assembly

reborn: verify driver-supplied failure safe_summary against host evidence in validate_failed_exit

Routine creation response exposes internal implementation details

GitHub issue search and create capabilities fail with HTTP 403

Activity panel hides tool details and does not update during active run

feat: added sui support

Re-think the node upgrade process so a supported node can't silently fall out of the whitelist

Investigate why the 2026-07-03 mainnet resharing failed to conclude

Add sandbox coverage and a stub verifier for async TEE attestation

perf(agent_loop): per-turn LoopExecutionState and capability-candidate clones

perf(wasm): component linker rebuilt on every instantiation

perf(conversations): full conversation state cloned + serialized on every inbound message

perf(llm): tool schemas deep-cloned and re-normalized on every LLM request

perf(event_projections): snapshot replays event stream to head on every call — materialize run state

Slack least-privilege: reduce OAuth grant for read-only users (write opt-in)

feat(contract): shorten attestation expiry to 1 day only on verifier rotation

Slack personal OAuth: per-capability scope split (read vs chat:write opt-in)

Bridged tool disclosure + narrowed capability allowlist strips the bridge meta-tools (latent)

Wiring-parity guard: EXPECTED_PRODUCTION_SHAPE is hand-derived — add a production-side shape accessor

ci: add main CI checks staging-release promotion

ci(reborn): flip integration-tier coverage report from informational to ratchet