Issues

• feat(delegator-oauth): turn off the subject check without disabling the rest of strict response validation

  triage/needs-triage
  praxis-proxy/policy#263 · Filter by author terylt opened on Oct 23, 2026

• feat(metadata-http): add optional shared response cache

  triage/needs-triage
  praxis-proxy/policy#261 · Filter by author mkoushni opened on Oct 22, 2026

• feat(metadata-http): add HTTP revalidation and bounded stale serving

  triage/needs-triage
  praxis-proxy/policy#259 · Filter by author mkoushni opened on Oct 22, 2026

• feat(observability): expose metadata callout metrics through CalloutObserver

  triage/needs-triage
  praxis-proxy/policy#260 · Filter by author mkoushni opened on Oct 22, 2026

• feat(metadata-http): authenticate with OAuth2 client credentials

  triage/needs-triage
  praxis-proxy/policy#258 · Filter by author mkoushni opened on Oct 22, 2026

• feat(http): propagate W3C trace context through host transports

  triage/needs-triage
  praxis-proxy/policy#257 · Filter by author mkoushni opened on Oct 22, 2026

• feat(http): add named TLS profiles for outbound callouts

  triage/needs-triage
  praxis-proxy/policy#256 · Filter by author mkoushni opened on Oct 22, 2026

• feat(metadata-http): emit callout telemetry and document the builtin

  triage/needs-triage
  praxis-proxy/policy#255 · Filter by author mkoushni opened on Oct 22, 2026

• feat(metadata-http): add subject gating, concurrency limits, and circuit breaker

  triage/needs-triage
  praxis-proxy/policy#254 · Filter by author mkoushni opened on Oct 22, 2026

• feat(metadata-http): add isolated in-process response cache

  triage/needs-triage
  praxis-proxy/policy#252 · Filter by author mkoushni opened on Oct 22, 2026

• feat(secrets): expose generations for metadata cache invalidation

  triage/needs-triage
  praxis-proxy/policy#253 · Filter by author mkoushni opened on Oct 22, 2026

• feat(metadata-http): enforce retry budgets and hardened URL execution

  triage/needs-triage
  praxis-proxy/policy#251 · Filter by author mkoushni opened on Oct 22, 2026

• feat(metadata-http): add shared-secret auth and bounded response parsing

  triage/needs-triage
  praxis-proxy/policy#250 · Filter by author mkoushni opened on Oct 22, 2026

• feat(metadata-http): build safe GET and POST requests from policy inputs

  triage/needs-triage
  praxis-proxy/policy#249 · Filter by author mkoushni opened on Oct 22, 2026

• feat(metadata-http): scaffold builtin adapter and shared callout core

  triage/needs-triage
  praxis-proxy/policy#248 · Filter by author mkoushni opened on Oct 22, 2026

• feat(metadata): define callout errors and audit event contract

  triage/needs-triage
  praxis-proxy/policy#247 · Filter by author mkoushni opened on Oct 22, 2026

• feat(host): carry remaining invocation deadline into HTTP callouts

  triage/needs-triage
  praxis-proxy/policy#246 · Filter by author mkoushni opened on Oct 22, 2026

• feat(assertions): project acquired metadata into exact headers

  triage/needs-triage
  praxis-proxy/policy#245 · Filter by author mkoushni opened on Oct 22, 2026

• fix(cel): redact acquired metadata from deny diagnostics

  triage/needs-triage
  praxis-proxy/policy#244 · Filter by author mkoushni opened on Oct 22, 2026

• feat(apl): infer route-handler metadata read capability

  triage/needs-triage
  praxis-proxy/policy#242 · Filter by author mkoushni opened on Oct 22, 2026

• feat(metadata): add lossless CEL, OPA, and Cedar projections

  triage/needs-triage
  praxis-proxy/policy#243 · Filter by author mkoushni opened on Oct 22, 2026

• feat(apl): execute fetch(name) before policy decisions

  triage/needs-triage
  praxis-proxy/policy#241 · Filter by author mkoushni opened on Oct 22, 2026

• feat(metadata): add typed metadata.fetch hook dispatch

  triage/needs-triage
  praxis-proxy/policy#240 · Filter by author mkoushni opened on Oct 22, 2026
  

• Policy session taint defaults to memory when no session store is configured

  triage/accepted
  Bug

  praxis-proxy/policy#235 · Filter by author shaneutt opened on Oct 21, 2026 · 0.6.0
  

• Make credential-leak prevention a reusable, automated skill

  triage/needs-triage
  praxis-proxy/policy#232 · Filter by author monshri opened on Oct 19, 2026