All issues

First-terminal pairing calls the production controller: unmocked in tests (shifting flakes), one-shot best-effort in production

#194

· ClaydeCode opened

on Jul 31, 2026

Hold app traffic until a pending back-channel logout is delivered (fail-closed barrier at forwardAuth, 503)

#193

· ClaydeCode opened

on Jul 29, 2026

OIDC back-channel logout delivery: durable outbox, fresh token per attempt, drain on app start

#192

· ClaydeCode opened

on Jul 29, 2026

Traefik router priority is incidental: /core/* routers can outrank per-app Host routers on short DNS zones

#191

· ClaydeCode opened

on Jul 29, 2026

Restore the zero-DB-queries invariant on /internal/auth for authenticated requests

#190

· ClaydeCode opened

on Jul 29, 2026

Un-pairing a device does not end that device's sessions inside apps — and the OIDC work will make it worse

#189

· ClaydeCode opened

on Jul 29, 2026

call_peer identifies the calling app by socket IP: stale lru_cache, no per-app credential, spoofable if forwarded-header trust widens

#188

· ClaydeCode opened

on Jul 27, 2026

Trial-lifecycle owner emails: welcome / 4h-to-expiry warning / goodbye (shard-initiated, kv_store state, env override)

#184

· ClaydeCode opened

on Jul 22, 2026

Web push notifications for the web-terminal (deferred)

#170

· ClaydeCode opened

on Jul 18, 2026

Design and evaluate a Multi-Cloud Storage Hub for file aggregation and migration

#169

· BeSovereign opened

on Jul 18, 2026

Add owner preferences endpoint (locale/language now; user profile later)

#168

· ClaydeCode opened

on Jul 18, 2026

Design and implement cross-shard federation and trust protocol

#167

· BeSovereign opened

on Jul 17, 2026