-
Notifications
You must be signed in to change notification settings - Fork 9
All issues
Issue creation is restricted in this repository
Issues
is:issue state:open
is:issue state:open
Search results
raft: leader never resumes replicating to a newly added learner once its log has been purged
bugSomething isn't workingSomething isn't workingStatus: Open.audit docs: no operator guide for the audit framework; ADR 0023 code samples, error variants, macro signature and metric types drifted from the implementation; feature docs overstate coverage
documentationImprovements or additions to documentationImprovements or additions to documentationStatus: Open.audit: initiator/outcome fidelity — verified-token initiator is dead code, EC2 access key and client IP missing on failures, WASM/OAuth2 events put free text and random correlation IDs in the record
bugSomething isn't workingSomething isn't workingsecurity_improvementSecurity improvement potentialSecurity improvement potentialStatus: Open.audit: ADR 0023 Phase 2 is not implemented — no ingress event from the
Authextractor, no completion middleware; only five login handlers emit perimeter eventsbugSomething isn't workingSomething isn't workingsecurity_improvementSecurity improvement potentialSecurity improvement potentialStatus: Open.audit: nine provider domains with mutating operations emit no Phase 3 audit events (api_key, oauth2_client, oauth2_key, revoke, domain_config, idmapping, auth_plugin_identity, scim_resource, credential bulk deletes)
bugSomething isn't workingSomething isn't workingsecurity_improvementSecurity improvement potentialSecurity improvement potentialStatus: Open.audit: HMAC KEK is a plaintext file beside the spool, is never rotated (
refresh_hmac_keyhas no caller), and diverges from the ADR 0016-v2 audit keybugSomething isn't workingSomething isn't workingsecurity_improvementSecurity improvement potentialSecurity improvement potentialStatus: Open.audit: no sink exists (SIEM/syslog/stdout/OTLP); the only output is the local spool file, and
[audit]has no enable switch or sink configurationenhancementNew feature or requestNew feature or requestsecurity_improvementSecurity improvement potentialSecurity improvement potentialStatus: Open.audit: SIGTERM does not drain the audit channels; spool writers are detached tasks and
terminate()ignores thembugSomething isn't workingSomething isn't workingsecurity_improvementSecurity improvement potentialSecurity improvement potentialStatus: Open.