| #954 |
Admin surface for per-tenant LLM token quota (hw.llm.tokens) + enable [tokengate] llm_token_quota
EARS: The platform admin shall be able to set a per-tenant hw.llm.tokens quota (TokenGate quota poli...
|
in-progress |
medium |
2026-10-17 00:13 |
- |
|
| #953 |
rate_limits: limit_scope=workflow unsupported on TokenGate path (needs per-run subject + assignment)
EARS: If a rate limit uses limit_scope=workflow, then the API shall reject it (400 INVALID_SCOPE) an...
|
in-progress |
low |
2026-10-17 00:13 |
- |
|
| #952 |
Move API workflow-submission bucket (require_rate_limit / TenantRateLimiter.check_quota) to TokenGate, decoupled from run leases
EARS: The workflow submission rate limit shall be a TokenGate rate_limit policy on resource hw.workf...
|
in-progress |
medium |
2026-10-17 00:13 |
- |
|
| #951 |
Drop local tool rate-limit counters (tool_rate_limit_usage + consume/check/cleanup SQL functions) after TokenGate path verified in production
EARS: When the TokenGate tool-limit path (#928) has run in production with no fail-closed incidents ...
|
in-progress |
medium |
2026-10-17 00:13 |
- |
|
| #934 |
Later: RunFlow replaces tools.docker.* after feature request delivered
EARS SPEC:
- When RunFlow ships the requested safe feature subset, tools.docker.run shall be version...
|
open |
low |
2026-10-15 23:07 |
- |
|
| #930 |
Approvals via Futex; local human_approvals kept as webhook-fed projection
EARS SPEC:
- tools.approval.request shall keep its kwargs and return shape and create a Futex decisi...
|
closed |
high |
2026-10-15 23:07 |
- |
|
| #929 |
Authorization via hosted auth service; hw_k1_ keys kept; Google login removed
EARS SPEC:
- require_permission shall decide via hosted auth (one namespace per Highway tenant) with...
|
open |
high |
2026-10-15 23:07 |
- |
|
| #928 |
Quotas/rate limits via TokenGate (tenant 'highway', subjects per Highway tenant); leases stay local
EARS SPEC:
- The rate_limits API shall keep its request/response contract while storing policies in ...
|
closed |
high |
2026-10-15 23:07 |
- |
|
| #927 |
Email via mail-api instead of SMTP
EARS SPEC:
- tools.email.send and all API email paths shall send through mail-api POST /api/v1/email...
|
closed |
high |
2026-10-15 23:07 |
- |
|