| #808 |
Fix connection registration window
orchestrator.py:488-495 - Connection registered AFTER try block begins, creating window for zombie c...
|
in-progress |
high |
2026-01-02 20:50 |
- |
|
| #807 |
Fix rate limiter lease atomicity
orchestrator.py:431-469 - Rate limit consumed in separate transaction from task execution. Crash bet...
|
in-progress |
high |
2026-01-02 20:50 |
- |
|
| #806 |
Standardize JumperClient to use singleton pattern
23+ locations bypass singleton pattern with direct JumperClient() calls. Need to replace with get_ju...
|
closed |
high |
2026-01-02 20:50 |
- |
|
| #800 |
Missing tenant filter in replay.py workflow lookup
Issue C: Defense-in-depth - replay.py line 67 queried workflow_run without tenant_id filter. While R...
|
closed |
high |
2026-01-02 20:23 |
- |
|
| #796 |
Rate limiter function calls missing highway schema prefix
ERROR: function release_rate_token(unknown) does not exist
Root cause: Python code in tenant_rate_l...
|
closed |
high |
2026-01-02 20:12 |
- |
|
| #790 |
send_email fails in IPC mode - Vault SSL cert not accessible in chroot
When apps call ctx.send_email() in IPC isolation mode, the email_tool tries to fetch SMTP credential...
|
closed |
high |
2026-01-02 05:47 |
- |
|
| #789 |
test_retry_exhaustion assertion failure - step_failed event leaking
Test expects 0 step_failed events after retry exhaustion (atomic rollback), but got 1. Error: 'Expec...
|
closed |
high |
2026-01-02 05:15 |
- |
|
| #788 |
Async deferral tests timing out (3 failures)
Tests test_async_deferral_basic, test_async_deferral_quick_job, and test_async_deferral_multiple_job...
|
closed |
high |
2026-01-02 05:15 |
- |
|
| #787 |
HIGH: Alert state lost on service restart causes alert storms
_last_alerts dict is in-memory only. On restart, all cooldown tracking lost, duplicate alerts flood ...
|
closed |
high |
2026-01-02 03:32 |
- |
|
| #786 |
HIGH: Approval tokens not invalidated when workflow completes
Tokens stored in DB without automatic invalidation on workflow completion. Stale tokens could be use...
|
closed |
high |
2026-01-02 03:32 |
- |
|
| #785 |
HIGH: DeadLetterService deletes before confirming DLQ insert success
Sequence: INSERT DLQ, DELETE run, DELETE task. If DELETE from run fails, task is in DLQ but still in...
|
closed |
high |
2026-01-02 03:32 |
- |
|
| #784 |
HIGH: Event subscription silently overwrites existing subscription
create_event_subscription INSERT uses ON CONFLICT DO UPDATE, silently replacing existing subscriptio...
|
closed |
high |
2026-01-02 03:32 |
- |
|
| #783 |
HIGH: complete_run locks run but not task table - state inconsistency risk
complete_run locks run row with FOR UPDATE but updates task table without locking. Another process c...
|
closed |
high |
2026-01-02 03:32 |
- |
|
| #782 |
HIGH: Secret cache TTL too long at 1 hour
SecretManager uses 1-hour TTL for secret cache. If a secret is rotated in Vault, workflows use stale...
|
closed |
high |
2026-01-02 03:32 |
- |
|
| #781 |
HIGH: HeartbeatService SKIP LOCKED may cause premature task timeout
HeartbeatService uses FOR UPDATE SKIP LOCKED, skipping rows locked by workflow transaction. If workf...
|
closed |
high |
2026-01-02 03:32 |
- |
|
| #775 |
Race condition in parallel branch wake processing causes workflow failure
When multiple parallel branches complete in rapid succession, multiple wake events are emitted. If t...
|
closed |
high |
2026-01-02 03:00 |
- |
|
| #774 |
demo-ultimate test failing: missing FINAL_2, FINAL_3 operations
The demo-ultimate test is failing with missing operations. Counter ends at 28 instead of 30. Missing...
|
closed |
high |
2026-01-02 02:46 |
- |
|
| #773 |
workflow_run.status not updated when task starts running
When a workflow is submitted, workflow_run.status is set to 'pending' but never updated to 'running'...
|
closed |
high |
2026-01-02 02:00 |
- |
|
| #772 |
Platform tenants not exempt from rate limits causing bootstrap failure
Bootstrap failed in production due to rate limits. _platform and platform tenants get identical rate...
|
closed |
high |
2026-01-02 01:43 |
- |
|
| #770 |
HIGH: Event await/emit race condition for infinite timeout waits
Issue #5 from audit: Race window between await_event event check and wait registration. If emit_even...
|
closed |
high |
2026-01-02 00:58 |
- |
|