| #912 |
Tool registry swallows ImportError: a broken tool module silently drops tools (126 -> 124) with only a log warning
EARS SPEC:
- When a tool module fails to import, the tool registry shall fail loudly (or expose the ...
|
open |
high |
2026-08-22 13:39 |
- |
|
| #911 |
Token endpoint leaks caught exception text into client 500 responses (str(e) in details, f-string in raise)
EARS SPEC:
- When a token endpoint fails, the API shall return a generic error code and message to t...
|
open |
high |
2026-08-22 13:33 |
- |
|
| #910 |
App SDK ctx.checkpoint() promises exactly-once replay caching and delivers none in production
EARS SPEC:
- When an app action calls ctx.checkpoint(step_name, func) and the workflow later resumes...
|
open |
high |
2026-08-22 12:04 |
- |
|
| #909 |
App-originated tool calls silently bypass rate limiting and per-workflow circuit-breaker isolation (ProxyDurableContext is not a DurableContext)
EARS SPEC:
- While an app action is executing, when it invokes a rate-limited tool, the Highway engi...
|
open |
high |
2026-08-22 12:04 |
- |
|
| #908 |
Platform tenant deactivate/reactivate return 200 but the workflow dies: internal.tenant.suspend/reactivate are never registered
EARS SPEC:
- If a workflow task references a tool name that is not present in the tool registry, the...
|
open |
high |
2026-08-22 12:02 |
- |
|
| #907 |
EPIC: Tier-classify Highway (tier0-3) and extract non-essential surface out of engine/core
EARS SPEC:
Scope: classify every component, tool, API route and DB table across jumper, highway-cor...
|
open |
high |
2026-08-22 12:01 |
- |
|
| #906 |
activity_worker is forked: enterprise (1577 lines) and highway-core (1160) are parallel implementations of safety-critical worker code
EARS SPEC:
- Safety-critical activity-worker logic shall have exactly ONE implementation in the stac...
|
open |
high |
2026-08-22 11:58 |
- |
|
| #854 |
EPIC: 50 source files exceed the 550-line hard cap - split without module shadowing
EARS SPEC (program-level):
- Every source file in the Highway stack shall be at most 500 lines (soft...
|
closed |
high |
2026-08-22 11:45 |
- |
|
| #853 |
8 deterministic test failures: broken assertions + workflow result attributed to switch branch instead of final task
EARS SPEC:
- Every test in tests/ shall be capable of passing against correct behaviour; an assertio...
|
open |
high |
2026-08-22 02:44 |
- |
|
| #852 |
Circuit-breaker storage split-brain: engine writes to highway_db_v2, API reads resilient_circuit_db, migration covers only one
EARS SPEC:
- The Highway engine and the /api/v1/circuit-breakers endpoint shall read and write circu...
|
open |
high |
2026-08-22 01:54 |
- |
|
| #850 |
Upgrade bulkman 2.0.1->2.0.3 and resilient-circuit 0.4.7->0.7.0 (multi-process breaker race, thread-safety, CLI rename)
EARS SPEC:
- The Highway stack shall depend on bulkman >=2.0.3,<3 and resilient-circuit >=0.7.0,<0.8...
|
in-progress |
high |
2026-08-22 01:44 |
- |
|
| #849 |
Golden demos: compensation lands AFTER the 5s event, inverting BRANCH_B/PHASE2B vs BRANCH_C/PHASE3 in both expected files
EARS SPEC:
- When a task with TimeoutPolicy(3s) fails by timeout and has an on_failure compensation ...
|
open |
high |
2026-08-03 22:11 |
- |
|
| #847 |
Encryption master key has an on-host env fallback next to the PostgreSQL data directory
EARS SPEC:
- The Highway platform shall source the JSONB encryption master key from Vault only; if V...
|
open |
high |
2026-08-03 20:47 |
- |
|
| #845 |
Replay simulation runs while-loop to the 10000 cap: agent_scheduled never terminates under mocked side effects
EARS SPEC:
- The Highway replay service shall bound simulation of a while loop to the iteration coun...
|
closed |
high |
2026-08-03 16:44 |
- |
|
| #842 |
Back-channel logout: accept identity logout_token, revoke Highway OIDC sessions
EARS SPEC:
- When identity POSTs a logout_token to /api/v1/auth/oidc/backchannel-logout, the API sha...
|
closed |
high |
2026-07-31 12:54 |
- |
|
| #839 |
Upgrade auth to 3.0.0 (strict-default flip with grandfathering; client always raises)
EARS SPEC:
- The Highway platform shall pin auth>=3.0.0 and deploy it with the migrations entrypoint...
|
closed |
high |
2026-07-31 01:53 |
- |
|
| #838 |
Adopt key-backed users (auth rak_ API keys) per auth deprecation notice 2/2 (SPEC 0008)
EARS SPEC:
- When auth 3.0.0 strict identity becomes default, every Highway authorization subject (u...
|
closed |
high |
2026-07-31 00:50 |
- |
|
| #836 |
postgres max_connections=80 saturates: FATAL too many clients during test runs
EARS SPEC:
- The postgres max_connections value shall exceed worst-case pool demand with headroom: a...
|
closed |
high |
2026-07-31 00:20 |
- |
|
| #835 |
OPS: Vault at vault.rodmena.app is SEALED - tenant secrets API returns 500
EARS SPEC:
- While Vault is sealed, the platform shall be considered degraded: /api/v1/tenant/secret...
|
closed |
high |
2026-07-31 00:20 |
- |
|
| #834 |
Upgrade auth lib to >=2.4.0 (auth 3.0.0 deprecation notice) + answer runflow RF-58 fix-notice
EARS SPEC:
- The Highway platform shall pin the auth Python library to >=2.4.0 (the 3.0.0 migration ...
|
closed |
high |
2026-07-30 23:26 |
- |
|