-
Notifications
You must be signed in to change notification settings - Fork 0
All issues
Issue creation is restricted in this repository
Issues
is:issue state:open
is:issue state:open
Search results
Minor correctness nits from the July review pass (audit action collision, leaked httpx clients, summary double-fire, demo seeding, blank participate shell)
fable-reviewFindings from Fable 5 codebase correctness reviewFindings from Fable 5 codebase correctness reviewpriority: P3Nice to haveNice to havetech-debtArchitecture / refactor / maintainabilityArchitecture / refactor / maintainabilityStatus: Open.#269 In IcebergAI/IcebergTTX;k8s backup CronJob captures Postgres only — inject attachments on the
app-uploadsPVC are unbackuped, so restore breaks attachment downloadsbugSomething isn't workingSomething isn't workingfable-reviewFindings from Fable 5 codebase correctness reviewFindings from Fable 5 codebase correctness reviewpriority: P3Nice to haveNice to haveseverity: mediumModerate risk or robustness gapModerate risk or robustness gapStatus: Open.#268 In IcebergAI/IcebergTTX;Release workflow publishes and cosign-signs images with no CI gate on the tagged commit
bugSomething isn't workingSomething isn't workingfable-reviewFindings from Fable 5 codebase correctness reviewFindings from Fable 5 codebase correctness reviewpriority: P3Nice to haveNice to haveseverity: mediumModerate risk or robustness gapModerate risk or robustness gapStatus: Open.#267 In IcebergAI/IcebergTTX;N+1 query patterns in three hot list endpoints (facilitator responses, inject comments, participant inject list)
bugSomething isn't workingSomething isn't workingfable-reviewFindings from Fable 5 codebase correctness reviewFindings from Fable 5 codebase correctness reviewperformancePerformance / scalabilityPerformance / scalabilitypriority: P2Planned / backlogPlanned / backlogseverity: mediumModerate risk or robustness gapModerate risk or robustness gapStatus: Open.#263 In IcebergAI/IcebergTTX;Admins can exfiltrate env-only secrets by re-pointing sink hosts (SIEM endpoint, SMTP host, proxy URL) and pressing "test"
bugSomething isn't workingSomething isn't workingfable-reviewFindings from Fable 5 codebase correctness reviewFindings from Fable 5 codebase correctness reviewpriority: P2Planned / backlogPlanned / backlogsecuritySecurity vulnerability or hardeningSecurity vulnerability or hardeningseverity: mediumModerate risk or robustness gapModerate risk or robustness gapStatus: Open.#259 In IcebergAI/IcebergTTX;Password-reset/invite links derive their host from the client-supplied Host header when PUBLIC_BASE_URL is unset (reset-link poisoning)
bugSomething isn't workingSomething isn't workingfable-reviewFindings from Fable 5 codebase correctness reviewFindings from Fable 5 codebase correctness reviewpriority: P2Planned / backlogPlanned / backlogsecuritySecurity vulnerability or hardeningSecurity vulnerability or hardeningseverity: mediumModerate risk or robustness gapModerate risk or robustness gapStatus: Open.#258 In IcebergAI/IcebergTTX;OIDC:
email_verifiedis computed by every adapter but never enforced — unverified-email account squatting and misdirected enrolmentbugSomething isn't workingSomething isn't workingfable-reviewFindings from Fable 5 codebase correctness reviewFindings from Fable 5 codebase correctness reviewpriority: P2Planned / backlogPlanned / backlogsecuritySecurity vulnerability or hardeningSecurity vulnerability or hardeningseverity: mediumModerate risk or robustness gapModerate risk or robustness gapStatus: Open.#257 In IcebergAI/IcebergTTX;[Feature]: Define exercise objectives as a first-class input to scenario design
enhancementNew feature or requestNew feature or requestStatus: Open.No retention or purge for AuditEvent and AuthToken rows (unbounded, PII-bearing growth)
enhancementNew feature or requestNew feature or requestfable-reviewFindings from Fable 5 codebase correctness reviewFindings from Fable 5 codebase correctness reviewpriority: P2Planned / backlogPlanned / backlogsecuritySecurity vulnerability or hardeningSecurity vulnerability or hardeningseverity: mediumModerate risk or robustness gapModerate risk or robustness gapStatus: Open.Multi-replica: five in-memory subsystems cap the app at one replica
enhancementNew feature or requestNew feature or requestpriority: P2Planned / backlogPlanned / backlogStatus: Open.Visual scenario representation: render the inject DAG, with a path-taken overlay for debriefs
enhancementNew feature or requestNew feature or requestpriority: P3Nice to haveNice to haveStatus: Open.Simulated correspondents: let participants reply to communications, LLM drafts the persona's counter-reply (facilitator-approved)
enhancementNew feature or requestNew feature or requestpriority: P3Nice to haveNice to haveStatus: Open.