Issues

• BSidesNYC

  OpenRAE/lilrae#1396 · Filter by author Brad-Edwards opened on Oct 17, 2026
  6

• build: patch source-map-js in MCP lockfiles

  OpenRAE/lilrae#1393 · Filter by author Brad-Edwards opened on Oct 17, 2026

• fix: resolve resource resolution module size failure in promotion checks

  OpenRAE/lilrae#1390 · Filter by author Brad-Edwards opened on Oct 16, 2026

• MCP development lockfiles pin source-map-js 1.2.1 with an open advisory

  bug
  OpenRAE/lilrae#1385 · Filter by author doublewhy opened on Oct 14, 2026

• Verify the run_command timeout against a real sshd running the capture broker

  bug
  OpenRAE/lilrae#1384 · Filter by author doublewhy opened on Oct 14, 2026

• Web API lab start and stop routes have no test for rejected deployment settings

  OpenRAE/lilrae#1383 · Filter by author doublewhy opened on Oct 14, 2026

• fix: make aptl-misp-suricata-sync --help print usage instead of failing

  bug
  OpenRAE/lilrae#1382 · Filter by author Brad-Edwards opened on Oct 14, 2026

• Supply-chain pinning tests silently drop a moved build script and never read the seat image build

  OpenRAE/lilrae#1381 · Filter by author doublewhy opened on Oct 14, 2026

• Run traceability omits capture spec versions, so RAES evidence satisfaction rejects LilRAE runs

  bug
  OpenRAE/lilrae#1372 · Filter by author doublewhy opened on Oct 13, 2026

• A drifted owned search index waits through the 60 s backend retry

  bug
  OpenRAE/lilrae#1368 · Filter by author doublewhy opened on Oct 13, 2026

• Wazuh active-response test scripts misread a blocked request and credit earlier runs

  bug
  OpenRAE/lilrae#1356 · Filter by author doublewhy opened on Oct 12, 2026

• Terminal WebSocket stops relaying input after one malformed frame

  bug
  OpenRAE/lilrae#1352 · Filter by author doublewhy opened on Oct 12, 2026

• RED-001 requires a Kali Linux image and tools that the realized kali node lacks

  OpenRAE/lilrae#1351 · Filter by author doublewhy opened on Oct 12, 2026

• Docs run Docker commands on container names that workspace scoping replaced

  OpenRAE/lilrae#1350 · Filter by author doublewhy opened on Oct 12, 2026

• Seat status and open-kiosk print a traceback instead of the bounded seat error

  bug
  OpenRAE/lilrae#1346 · Filter by author doublewhy opened on Oct 12, 2026

• MCP API requests add a second ? when the endpoint already has a query string

  bug
  OpenRAE/lilrae#1345 · Filter by author doublewhy opened on Oct 12, 2026

• Resolve the MCP lab config path with fileURLToPath so servers start from a path with spaces

  bug
  OpenRAE/lilrae#1344 · Filter by author doublewhy opened on Oct 12, 2026

• Range snapshot never sets image_digest, so the run record has no container image digests

  OpenRAE/lilrae#1340 · Filter by author doublewhy opened on Oct 12, 2026

• A refused run export still creates its output directory

  OpenRAE/lilrae#1334 · Filter by author doublewhy opened on Oct 12, 2026

• MCP servers spend about 8 s retrying trace export when they shut down without a collector

  OpenRAE/lilrae#1333 · Filter by author doublewhy opened on Oct 12, 2026

• An exact environment declaration rejects a granted secret_fixture after the start

  OpenRAE/lilrae#1332 · Filter by author doublewhy opened on Oct 12, 2026

• Seat image pull requests its token from /token instead of the registry's advertised realm

  OpenRAE/lilrae#1331 · Filter by author doublewhy opened on Oct 12, 2026

• Range snapshot image_id records the container ID

  bug
  OpenRAE/lilrae#1330 · Filter by author doublewhy opened on Oct 12, 2026

• The local run store creates run directories with the umask

  OpenRAE/lilrae#1329 · Filter by author doublewhy opened on Oct 12, 2026

• ADR-041 still names the _audit and _proc-acct global roots

  OpenRAE/lilrae#1328 · Filter by author doublewhy opened on Oct 12, 2026