| #852 |
Circuit-breaker storage split-brain: engine writes to highway_db_v2, API reads resilient_circuit_db, migration covers only one
EARS SPEC:
- The Highway engine and the /api/v1/circuit-breakers endpoint shall read and write circu...
|
open |
high |
2026-08-22 01:54 |
- |
|
| #851 |
Vault token VAULT_TOKEN_ADMIN is invalid - OIDC/SSO sign-in and circuit-breaker API are down in production
EARS SPEC:
- When the Highway API cannot authenticate to Vault, the /api/v1/health circuit_breaker_d...
|
open |
critical |
2026-08-22 01:50 |
- |
|
| #850 |
Upgrade bulkman 2.0.1->2.0.3 and resilient-circuit 0.4.7->0.7.0 (multi-process breaker race, thread-safety, CLI rename)
EARS SPEC:
- The Highway stack shall depend on bulkman >=2.0.3,<3 and resilient-circuit >=0.7.0,<0.8...
|
in-progress |
high |
2026-08-22 01:44 |
- |
|
| #849 |
Golden demos: compensation lands AFTER the 5s event, inverting BRANCH_B/PHASE2B vs BRANCH_C/PHASE3 in both expected files
EARS SPEC:
- When a task with TimeoutPolicy(3s) fails by timeout and has an on_failure compensation ...
|
open |
high |
2026-08-03 22:11 |
- |
|
| #848 |
Adopt bulkman 2.0.1 - pin >=2.0.0,<3 and verify shutdown semantics change
EARS SPEC:
- The Highway engine shall pin bulkman to >=2.0.0,<3 so the major-version adoption is exp...
|
closed |
medium |
2026-08-03 20:48 |
- |
|
| #847 |
Encryption master key has an on-host env fallback next to the PostgreSQL data directory
EARS SPEC:
- The Highway platform shall source the JSONB encryption master key from Vault only; if V...
|
open |
high |
2026-08-03 20:47 |
- |
|
| #846 |
Replay never executes tools (#833), so while conditions driven by ctx.set_variable can never resolve in simulation
EARS SPEC:
- While executing in replay/simulation mode, when a workflow variable was set by a tool v...
|
open |
medium |
2026-08-03 18:55 |
- |
|
| #845 |
Replay simulation runs while-loop to the 10000 cap: agent_scheduled never terminates under mocked side effects
EARS SPEC:
- The Highway replay service shall bound simulation of a while loop to the iteration coun...
|
closed |
high |
2026-08-03 16:44 |
- |
|
| #844 |
circuit-breakers 503: Vault password for resilient_circuit_db never applied to the postgres role
EARS SPEC:
- When GET /api/v1/circuit-breakers is called by an authorized caller, the Highway API sh...
|
closed |
critical |
2026-08-03 16:44 |
- |
|
| #843 |
health/metrics 500s: get_health_metrics builds jumper.r_%I, breaks on queue named "default"
EARS SPEC:
- When get_health_metrics builds a per-queue SQL statement, the Highway health metrics fu...
|
closed |
critical |
2026-08-03 16:44 |
- |
|
| #842 |
Back-channel logout: accept identity logout_token, revoke Highway OIDC sessions
EARS SPEC:
- When identity POSTs a logout_token to /api/v1/auth/oidc/backchannel-logout, the API sha...
|
closed |
high |
2026-07-31 12:54 |
- |
|
| #841 |
auth 3.0.1: drop local varchar reconciliation (upstreamed as _reconcile_text_columns)
EARS SPEC:
- When auth 3.0.1 is deployed, Highway shall remove its local varchar->TEXT reconciliatio...
|
closed |
medium |
2026-07-31 10:56 |
- |
|
| #840 |
Integrate RODMENA Identity (OIDC) as sign-in option for highway-dashboard
EARS SPEC:
- When a user chooses 'Sign in with RODMENA ID', the Highway API shall run an authorizati...
|
closed |
medium |
2026-07-31 10:55 |
- |
|
| #839 |
Upgrade auth to 3.0.0 (strict-default flip with grandfathering; client always raises)
EARS SPEC:
- The Highway platform shall pin auth>=3.0.0 and deploy it with the migrations entrypoint...
|
closed |
high |
2026-07-31 01:53 |
- |
|
| #838 |
Adopt key-backed users (auth rak_ API keys) per auth deprecation notice 2/2 (SPEC 0008)
EARS SPEC:
- When auth 3.0.0 strict identity becomes default, every Highway authorization subject (u...
|
closed |
high |
2026-07-31 00:50 |
- |
|
| #837 |
Stale/drifted tests: 2 unit mocks, switch_operator output assertions, docker_tools removal, wip_integration chronic reds
EARS SPEC:
- When the implementation changes observable behavior, the corresponding tests shall be u...
|
open |
medium |
2026-07-31 00:20 |
- |
|
| #836 |
postgres max_connections=80 saturates: FATAL too many clients during test runs
EARS SPEC:
- The postgres max_connections value shall exceed worst-case pool demand with headroom: a...
|
closed |
high |
2026-07-31 00:20 |
- |
|
| #835 |
OPS: Vault at vault.rodmena.app is SEALED - tenant secrets API returns 500
EARS SPEC:
- While Vault is sealed, the platform shall be considered degraded: /api/v1/tenant/secret...
|
closed |
high |
2026-07-31 00:20 |
- |
|
| #834 |
Upgrade auth lib to >=2.4.0 (auth 3.0.0 deprecation notice) + answer runflow RF-58 fix-notice
EARS SPEC:
- The Highway platform shall pin the auth Python library to >=2.4.0 (the 3.0.0 migration ...
|
closed |
high |
2026-07-30 23:26 |
- |
|
| #833 |
CATASTROPHIC: /simulate re-executed REAL tool side effects + crashed on incomplete mock client
User report: opening the Simulate/Replay tab on a real workflow produced a 500 with 'ReplayJumperCli...
|
closed |
critical |
2026-07-19 17:26 |
- |
|