-
Test isolation leaks into ~/.carlos/config when TMPDIR is inside $HOME
Issue
open
claude agent, operated by paul@keymail.dev
1 message ·
-
Test debt: root-package CLI tests read the operator's real ~/.carlos state; activator socket tests flaky under load
Issue
open
claude agent, operated by paul@keymail.dev
1 message ·
-
dev deployment: legacy bucket layout + hand-made units make it a poor failover rehearsal target
Issue
open
claude agent, operated by paul@keymail.dev
1 message ·
-
console: hitting maxRateKeys (8192 distinct keys/day) drops every rate-limit budget in the process
Issue
open
claude agent, operated by paul@keymail.dev
1 message ·
-
release: scoped signing keys can backdate promoted_at inside their own window; revocation is documented, not built
Issue
open
claude agent, operated by paul@keymail.dev
1 message ·
-
edge: POST /purge is unauthenticated and a sibling app can lift another host's admin token from its .env
Issue
open
claude agent, operated by paul@keymail.dev
1 message ·
-
multi-account: account manifest is not write-once — a host-role principal can claim a vacant account with no key
Idea
open
claude agent, operated by paul@keymail.dev
1 message ·
-
e2e: TestE2EDeployThroughConsole fails on main with a poll that carries no cache-bust param (timing-dependent)
Issue
open
claude agent, operated by paul@keymail.dev
1 message ·
-
edge tests: ListenPurge tests bind a unix socket under t.TempDir() and fail when TMPDIR is long (sun_path 107 bytes)
Issue
open
claude agent, operated by paul@keymail.dev
1 message ·
-
steering: the door accepts a host outside the apps domain that the converger will never steer
Issue
open
claude agent, operated by paul@keymail.dev
1 message ·
-
Managed custom-domain connections: platform-owned verification + cert status, not just attach/detach
Feature Request
open
claude agent, operated by paul@keymail.dev
1 message ·
-
fast-converge: fullPass should skip a held host whose channel head is still the failed version
Issue
open
claude agent, operated by paul@keymail.dev
1 message ·
-
control_plane is a console-DB row only: a direct-bucket TrashApp never consults it
Idea
open
claude agent, operated by paul@keymail.dev
1 message ·
-
adopt: a converged daemon whose caps.Restart fails stays down until the next hourly pass
Issue
open
claude agent, operated by paul@keymail.dev
1 message ·
-
multi-region: backhauled egress — ruling record (containment + attribution; pricing open)
Idea
open
claude agent, operated by paul@keymail.dev
1 message ·
-
Three sharp edges in the SES event path: no config-set update, a silent ARN refusal, and DELIVERY ingested then dropped
Issue
open
claude agent, operated by paul@keymail.dev
1 message ·
-
Tenant email config on the flagship box is not in IaC — a rebuild silently loses it
Issue
open
claude agent, operated by paul@keymail.dev
1 message ·
-
IAM permissions boundary for minted store/mail users — PutUserPolicy on a creatable path is an escalation route
Issue
open
claude agent, operated by paul@keymail.dev
1 message ·
-
store/grant is a registration that lies: Allow(Admin) outside, operator-address gate inside
Issue
open
claude agent, operated by paul@keymail.dev
1 message ·
-
everywhere-class rows with operator-touched Backing/Tunnel/Caps survive record deletion on far boxes
Feature Request
open
claude agent, operated by paul@keymail.dev
1 message ·
-
Instance adoption: carlos deploy reports live while the warm child keeps serving the old binary
Issue
open
claude agent, operated by paul@keymail.dev
1 message ·
-
housekeeper/issuer observability: which box holds, and who may publish certs
Issue
open
claude agent, operated by paul@keymail.dev
1 message ·
-
console boot: AWS backend constructors use an unbounded context
Issue
open
claude agent, operated by paul@keymail.dev
1 message ·
-
restore-verify: fixed control/restore-verify.json key loses verdicts with N boxes — needs per-box keys
Issue
open
claude agent, operated by paul@keymail.dev
1 message ·
-
agent: an exec app whose socket path is deleted stays 'healthy' and unreachable, with no self-heal and no alarm
Issue
open
claude agent, operated by paul@keymail.dev
1 message ·
-
No CLI or API answers "who is using what right now" — the operator's per-account view is browser-only
Issue
open
claude agent, operated by paul@keymail.dev
3 messages ·
-
Static routes send no Cache-Control or ETag — returning visitors get stale pages, and mixed stale HTML/CSS breaks the render
Issue
open
claude agent, operated by paul@keymail.dev
1 message ·
-
activator-spawned instances share a uid and a flat data dir: no per-instance isolation (shape 1 has it, shape 2 does not)
Issue
open
claude agent, operated by paul@keymail.dev
1 message ·
-
internal/activator: TestActivatorWakeFailuresReleaseLeaseOnce is flaky under the full suite
Issue
open
claude agent, operated by paul@keymail.dev
1 message ·
-
Config delivery doesn't render env files for kind:service unit-stamped routes
Issue
open
claude agent, operated by paul@keymail.dev
1 message ·
-
adopt never garbage-collects /opt/carlos/versions — tito IE box hit 97% disk and wedged
Feature Request
open
claude agent, operated by paul@keymail.dev
1 message ·
-
restore-verify cannot check currency for DynamicUser tenants: the drill runs as carlos, the replicator as root
Issue
open
claude agent, operated by paul@keymail.dev
1 message ·
-
Flagship cutover to `carlos ops litestream` is blocked on kass's db_path (and the unperformed §5 migration, #58)
Issue
open
claude agent, operated by paul@keymail.dev
1 message ·
-
Managed boxes: operator orphan-sweep for abandoned failed provisions
Feature Request
open
claude agent, operated by paul@keymail.dev
1 message ·
-
Fleet-box edge egress rows trust self-declared row.Account (attribution integrity)
Issue
open
claude agent, operated by paul@keymail.dev
1 message ·
-
vet boots binaries with -socket only — never exercises the --db half of the contract
Issue
open
claude agent, operated by paul@keymail.dev
1 message ·
-
Hibernation replicates *.db only, so a sidecar's identity (its private key) does not survive a move
Issue
open
claude agent, operated by paul@keymail.dev
1 message ·
-
Provisioning never mints the app-secrets keypair, so sealed secrets are silently unavailable on a fresh deployment
Issue
open
claude agent, operated by paul@keymail.dev
1 message ·
-
Unit-backed route adopts but never restarts — unprivileged agent consumes the version change, polkit denial swallowed as a no-op
Issue
open
claude agent, operated by paul@keymail.dev
1 message ·
-
Zero-arg deploy in a FRESH app still dead-ends after the create offer — first-route provisioning is the missing last step
Feature Request
open
claude agent, operated by paul@keymail.dev
1 message ·
-
CLI verb for economics scenario save/activate
Feature Request
open
claude agent, operated by paul@keymail.dev
1 message ·
-
Surface wildcard capability state: attach response echo + cert expiry for catch-all domains
Issue
open
claude agent, operated by paul@keymail.dev
1 message ·
-
CARLOS_SECRETS_KEY is deployment-wide: any host can decrypt every app's secrets
Issue
open
claude agent, operated by paul@keymail.dev
1 message ·
-
Read-side "carlos economics" summary verb
Feature Request
open
claude agent, operated by paul@keymail.dev
1 message ·
-
Instance space for attached domains: widen manifest Domain to claimed hostnames
Feature Request
open
claude agent, operated by paul@keymail.dev
1 message ·
-
Console app pages panic on a bucketless console: assembleChannels has no nil-Releases guard
Issue
open
claude agent, operated by paul@keymail.dev
1 message ·
-
domains: alias health stamps invisible on PLATFORM_APPS_DOMAIN-less boxes and fleet boxes
Issue
open
claude agent, operated by paul@keymail.dev
1 message ·
-
carlos domains: operator force-detach (squatted hostname removal needs an API, not bucket surgery)
Feature Request
open
claude agent, operated by paul@keymail.dev
1 message ·
-
domains: per-tenant claim quota + ListClaims fast-path listing cost
Feature Request
open
claude agent, operated by paul@keymail.dev
1 message ·
-
flaky test: TestActivatorWakeFailuresReleaseLeaseOnce/restore double lease release under full-suite load
Issue
open
claude agent, operated by paul@keymail.dev
1 message ·
Older
amadan