Issues

• Remove dead module-source normalization block in the planner

  area:clipriority:lowrefactorsize:small
  RonaldHensbergen/composable-data-stack#906 · Filter by author RonaldHensbergen opened on Oct 19, 2026

• Make subprocess workflow tests hermetic against a local .env and CDS_* variables

  area:clibugsize:small
  RonaldHensbergen/composable-data-stack#905 · Filter by author RonaldHensbergen opened on Oct 19, 2026

• Add rootless container runtime preflight check and compatibility documentation

  area:securityenhancementpriority:highsize:small
  RonaldHensbergen/composable-data-stack#899 · Filter by author RonaldHensbergen opened on Oct 18, 2026

• Enforce a production runtime policy for capabilities, privileges, user and filesystem

  area:securityenhancementpriority:highsize:medium
  RonaldHensbergen/composable-data-stack#898 · Filter by author RonaldHensbergen opened on Oct 18, 2026

• Add declarative seccomp/AppArmor/SELinux confinement settings to profiles

  area:securityenhancementpriority:highsize:medium
  RonaldHensbergen/composable-data-stack#897 · Filter by author RonaldHensbergen opened on Oct 18, 2026

• Add a provider-neutral HTTP routing contract for reverse-proxy integration

  area:configurationenhancementpriority:mediumsize:medium
  RonaldHensbergen/composable-data-stack#883 · Filter by author RonaldHensbergen opened on Oct 14, 2026

• Extend cds report with a versioned control-evidence assurance bundle for CI

  area:cliarea:securityenhancementsize:medium
  RonaldHensbergen/composable-data-stack#881 · Filter by author RonaldHopRegioGV opened on Oct 12, 2026

• Add auditable expiring policy exceptions tied to evaluated security findings

  area:configurationarea:securityenhancementsize:medium
  RonaldHensbergen/composable-data-stack#880 · Filter by author RonaldHopRegioGV opened on Oct 12, 2026

• Add reproducible cross-platform exit tests including data export and import

  area:cliarea:kubernetesenhancementsize:medium
  RonaldHensbergen/composable-data-stack#879 · Filter by author RonaldHopRegioGV opened on Oct 12, 2026

• Extend deployment evidence with a cross-artifact supplier-chain inventory

  area:cliarea:securityenhancementsize:medium
  RonaldHensbergen/composable-data-stack#878 · Filter by author RonaldHopRegioGV opened on Oct 12, 2026

• Generate deployment-specific operational runbooks from declared capabilities

  area:cliarea:docsenhancementsize:medium
  RonaldHensbergen/composable-data-stack#877 · Filter by author RonaldHopRegioGV opened on Oct 12, 2026

• Add traceable workload sustainability metadata and emissions reporting

  area:cliarea:configurationenhancement
  RonaldHensbergen/composable-data-stack#876 · Filter by author RonaldHopRegioGV opened on Oct 12, 2026

• Declare and validate secret-rotation readiness without resolving secret values

  area:configurationarea:securityenhancementsize:medium
  RonaldHensbergen/composable-data-stack#875 · Filter by author RonaldHopRegioGV opened on Oct 12, 2026

• Add validated workload data and AI governance records

  area:configurationenhancementsize:medium
  RonaldHensbergen/composable-data-stack#874 · Filter by author RonaldHopRegioGV opened on Oct 12, 2026

• Add a validated supplier and legal register for external services

  area:configurationenhancementsize:medium
  RonaldHensbergen/composable-data-stack#873 · Filter by author RonaldHopRegioGV opened on Oct 12, 2026

• Add validated per-deployment sovereignty strategy metadata

  area:configurationenhancementsize:small
  RonaldHensbergen/composable-data-stack#872 · Filter by author RonaldHopRegioGV opened on Oct 12, 2026

• Run pip-audit against hash-locked image requirements

  area:imagesarea:securityenhancementpriority:lowsize:small
  RonaldHensbergen/composable-data-stack#870 · Filter by author RonaldHensbergen opened on Oct 10, 2026

• Document the localhost-only default for the identity provider's published port

  area:docsdocumentationhacktoberfestpriority:lowsize:small
  RonaldHensbergen/composable-data-stack#865 · Filter by author RonaldHensbergen opened on Oct 9, 2026

• Break up very long functions in compile pipeline and profile composer

  area:clirefactorsize:medium
  RonaldHensbergen/composable-data-stack#862 · Filter by author RonaldHensbergen opened on Oct 9, 2026

• Split cli/security.py into a package of rule-check families

  area:cliarea:securityrefactorsize:medium
  RonaldHensbergen/composable-data-stack#861 · Filter by author RonaldHensbergen opened on Oct 9, 2026

• Split cli/k8s_renderer.py into focused modules

  area:cliarea:kubernetesrefactorsize:medium
  RonaldHensbergen/composable-data-stack#860 · Filter by author RonaldHensbergen opened on Oct 9, 2026

• Split cli/main.py into focused modules

  area:clirefactorsize:medium
  RonaldHensbergen/composable-data-stack#859 · Filter by author RonaldHensbergen opened on Oct 9, 2026

• Support a standard vocabulary for dataset classification in the open-data-provider contract

  area:configurationenhancementpriority:long-termsize:small
  RonaldHensbergen/composable-data-stack#845 · Filter by author RonaldHensbergen opened on Oct 7, 2026 · Dutch Public-Sector Data & Security Alignment

• Allow a profile to declare participation as a federated data-sharing data provider

  area:configurationenhancementpriority:lowsize:small
  RonaldHensbergen/composable-data-stack#844 · Filter by author RonaldHensbergen opened on Oct 7, 2026 · Dutch Public-Sector Data & Security Alignment

• Assess whether the lineage-sink contract satisfies FDS data-provider provenance basisafspraken

  area:docsdocumentationenhancementpriority:lowsize:small
  RonaldHensbergen/composable-data-stack#843 · Filter by author RonaldHensbergen opened on Oct 7, 2026 · Dutch Public-Sector Data & Security Alignment