Issues

• [SECURITY] Secret rotation guardian requires action

  reprewindai-dev/veklom-byos-backend#243 · Filter by author github-actions opened on Aug 31, 2026

• ci/routes: reconcile stale tests with archived API surface before restoring security gates

  reprewindai-dev/veklom-byos-backend#238 · Filter by author reprewindai-dev opened on Aug 30, 2026

• ci/db: repair orphaned Alembic revision fef856c068bf blocking clean-checkout verification

  reprewindai-dev/veklom-byos-backend#234 · Filter by author reprewindai-dev opened on Aug 27, 2026
  2

• truth/identity: reconcile Step 3 execution-profile certificate semantics with ephemeral execution identity

  reprewindai-dev/veklom-byos-backend#233 · Filter by author reprewindai-dev opened on Aug 27, 2026
  1

• security/truth: bind new BYOS→CAPPO workspace assertion to a real verifier and authority contract

  reprewindai-dev/veklom-byos-backend#228 · Filter by author reprewindai-dev opened on Aug 22, 2026
  1

• security/truth: reconcile restored PGL onboarding with real Gnomledger contract and evidence semantics

  reprewindai-dev/veklom-byos-backend#225 · Filter by author reprewindai-dev opened on Aug 21, 2026
  1

• security/auth: stop scanning arbitrary process environment for embedded GitHub OAuth secrets

  reprewindai-dev/veklom-byos-backend#215 · Filter by author reprewindai-dev opened on Aug 17, 2026
  2

• security/auth: stop public registration from granting admin-authorized role

  reprewindai-dev/veklom-byos-backend#214 · Filter by author reprewindai-dev opened on Aug 17, 2026
  3

• security/auth: stop public /demo-pgl from minting production-format bearer authority

  reprewindai-dev/veklom-byos-backend#213 · Filter by author reprewindai-dev opened on Aug 17, 2026
  1

• security/auth: scope and clear public-endpoint RLS bypass instead of leaving transaction-wide bypass active

  reprewindai-dev/veklom-byos-backend#212 · Filter by author reprewindai-dev opened on Aug 17, 2026
  2

• runtime/security: remove forbidden localhost:3000 fallback from canonical auth control-plane redirects

  reprewindai-dev/veklom-byos-backend#211 · Filter by author reprewindai-dev opened on Aug 17, 2026
  3

• security/auth: remove public registration auto-verification for pgl_test_*@veklom.com

  reprewindai-dev/veklom-byos-backend#210 · Filter by author reprewindai-dev opened on Aug 17, 2026
  2

• architecture/truth: stop exposing legacy mock GPC router from canonical BYOS runtime

  reprewindai-dev/veklom-byos-backend#201 · Filter by author reprewindai-dev opened on Aug 13, 2026
  1

• security/truth: remove fabricated quantum/PGL/orchestration state from canonical health router

  reprewindai-dev/veklom-byos-backend#199 · Filter by author reprewindai-dev opened on Aug 13, 2026
  2

• ci/security: enforce exact-head merge gates for admins and block failed-check overrides

  reprewindai-dev/veklom-byos-backend#196 · Filter by author reprewindai-dev opened on Aug 11, 2026
  3

• security/truth: remove committed Coolify topology and unsupported discovery/commercial claims from Phase 1/2 rollout

  no-issue-activity
  reprewindai-dev/veklom-byos-backend#191 · Filter by author reprewindai-dev opened on Aug 11, 2026
  1

• Ops truth: disabled health restart must not clear persistent dark-state timer

  no-issue-activity
  reprewindai-dev/veklom-byos-backend#183 · Filter by author reprewindai-dev opened on Aug 10, 2026
  1

• Security/ops: fail closed on Alembic migration drift instead of auto-stamping lexicographic head

  no-issue-activity
  reprewindai-dev/veklom-byos-backend#182 · Filter by author reprewindai-dev opened on Aug 10, 2026
  1

• Security/truth: fail closed Agent Duel treasury and remove synthetic settlement proofs

  no-issue-activity
  reprewindai-dev/veklom-byos-backend#178 · Filter by author reprewindai-dev opened on Aug 9, 2026
  1

• Retire PayAPI catalog-era route sprawl and define one canonical external x402 capability

  reprewindai-dev/veklom-byos-backend#174 · Filter by author reprewindai-dev opened on Aug 8, 2026
  1

• Replace PayAPI catalog smoke test with real paid-execution verification

  reprewindai-dev/veklom-byos-backend#173 · Filter by author reprewindai-dev opened on Aug 8, 2026
  6

• security(vnp): Ed25519-only ingestion is replayable after JWT bypass — bind freshness/idempotency before accepting metrics

  no-issue-activity
  reprewindai-dev/veklom-byos-backend#172 · Filter by author reprewindai-dev opened on Aug 7, 2026
  1

• Block GPCUPDATED production use until mock execution, secret handling, and ownership drift are remediated

  no-issue-activity
  reprewindai-dev/veklom-byos-backend#167 · Filter by author reprewindai-dev opened on Aug 4, 2026
  2

• 👻 Poltergeist Nightly Alert (active)

  opspoltergeist-alert
  reprewindai-dev/veklom-byos-backend#102 · Filter by author github-actions opened on Jul 16, 2026