All issues

Search results

Native evidence tests must carry a positive control — a green from a probe that never ran is not evidence

Status: Open.

#361 In Gilamonster-Foundation/agent-bridle;

· hartsock opened on Aug 14, 2026

cov-ci: wall-clock-bounded tests fail under llvm-cov instrumentation on a loaded machine (false-failure class)

Status: Open.

#360 In Gilamonster-Foundation/agent-bridle;

· hartsock opened on Aug 14, 2026

Mint the GrantedRoot at Gate::authorize — a pathname must never be authority twice (#351/#354 residual)

Status: Open.

#359 In Gilamonster-Foundation/agent-bridle;

· hartsock opened on Aug 14, 2026

fdguard macOS: adopt POSIX_SPAWN_CLOEXEC_DEFAULT to close the descriptor race in-kernel (follow-up to #352)

risk:highHigh-risk changeHigh-risk change

Status: Open.

#358 In Gilamonster-Foundation/agent-bridle;

· hartsock opened on Aug 14, 2026

CI integrity: stacked PRs report CLEAN having run no build/test, and formal.yml misses agent-bridle-fdguard

risk:highHigh-risk changeHigh-risk change

Status: Open.

#356 In Gilamonster-Foundation/agent-bridle;

· hartsock opened on Aug 14, 2026

caveat_interceptor: /dev allowlist is an un-canonicalized string compare evaluated before the leash check

risk:highHigh-risk changeHigh-risk change

Status: Open.

#355 In Gilamonster-Foundation/agent-bridle;

· hartsock opened on Aug 14, 2026

openat2(RESOLVE_BENEATH|NO_SYMLINKS) re-mediation: close the parent-side check→open TOCTOU (ADR 0026 slice 2)

Status: Open.

#351 In Gilamonster-Foundation/agent-bridle;

· hartsock opened on Aug 14, 2026

macOS Seatbelt: narrow (allow file-read-metadata) to granted roots + traversal ancestors (residual seatbelt-fs-metadata-ambient, option c)

Status: Open.

#339 In Gilamonster-Foundation/agent-bridle;

· hartsock opened on Aug 11, 2026

spawn boundary: no explicit ambient-FD close (CLOEXEC-only) — descriptor-hygiene residual for v0.8

Status: Open.

#319 In Gilamonster-Foundation/agent-bridle;

· hartsock opened on Aug 9, 2026

eval: benchmark attenuation against ambient and OpenShell baselines

Status: Open.

#311 In Gilamonster-Foundation/agent-bridle;

· hartsock opened on Jul 28, 2026

security: operation-scoped forge capabilities for repo/ref-bound writes

Status: Open.

#310 In Gilamonster-Foundation/agent-bridle;

· hartsock opened on Jul 28, 2026

Agent Bridle: as command compiler

Status: Open.

#306 In Gilamonster-Foundation/agent-bridle;

· hartsock opened on Jul 28, 2026