All pull requests

Pull requests

• The LDAPS AD bind takes the revocation-hop guard and its own [auth].ad_tls_crl_file (BACKLOG #2193 slice (b))

  ci-redqa
  #2627·wshallwshall opened Oct 28, 2026Collaborator·

  ·
  4

• The Vault clients refuse an unset MEFOR_*_VAULT_ADDR or _TOKEN instead of falling back to VAULT_ADDR, VAULT_TOKEN or ~/.vault-token (BACKLOG #2851)

  qa
  #2625·wshallwshall opened Oct 28, 2026Collaborator·

  ·
  3

• Batch 453 wave 2: the inbound FTPS poll runs the revocation-hop guard (BACKLOG #2193 slice (a))

  qa
  #2622·wshallwshall opened Oct 28, 2026Collaborator·

  ·
  4

• Sandbox mode isolated: the parent brokers db_lookup and fhir_lookup (BACKLOG #3131, slice A)

  qa
  #2620·wshallwshall opened Oct 28, 2026Collaborator·

  ·
  4

• Server stores gain the received-at index, built outside the client timeout, and a per-channel loose index scan (BACKLOG #1726 limbs A and B)

  qa
  #2613·wshallwshall opened Oct 28, 2026Collaborator·

  ·
  3

• Batch 453 wave 1: partial RCPT refusal, auth loosenings, IDE service config, cipher-audit, TOTP off-loop, scaffold, timing tests, connscale, verify read-only (BACKLOG #2924, #3011, #2600, #2908, #1719, #3929, #3948, #3786, #3456, #3132, #1708, #2720)

  ci-redqa
  #2608·wshallwshall opened Oct 28, 2026Collaborator·

  ·
  16

• Bound what a refused inbound body stores, per inbound (BACKLOG #2608)

  ci-redqa
  #2607·wshallwshall opened Oct 28, 2026Collaborator·

  ·
  5

• anon: a retarget of a default field is refused unless listed, the leak-check scans what it leaves, and no TM offset or whitespace-split value is kept (BACKLOG #3000, #3493)

  qa
  #2605·wshallwshall opened Oct 28, 2026Collaborator·

  ·
  5

• Key custody wave 3.1: Windows AppContainer spike, a non-required job (BACKLOG #3411)

  ci-redqa
  #2604·wshallwshall opened Oct 28, 2026Collaborator·

  ·
  4

• An inbound's bind-failure alert resolves itself once it starts, except inside its own restart rule (BACKLOG #1741 act 3)

  ci-redqa
  #2603·wshallwshall opened Oct 28, 2026Collaborator·

  ·
  9

• Audit tee lines get their own forwarder lane; audit-verify checks seq:row_hash pairs in one walk (BACKLOG #2612 steps 2, 3 and 4)

  qa
  #2601·wshallwshall opened Oct 28, 2026Collaborator·

  ·
  8

• Read a header with no separator after MSH-2 in shape, and CPU-ratio redaction arms read the thread clock (BACKLOG #2589, #2998, #3721)

  qa
  #2599·wshallwshall opened Oct 28, 2026Collaborator·

  ·
  5

• Redaction docs: state once who the exception-message convention binds, and the open name-run residuals (BACKLOG #3464, #2079 docs remainder)

  ci-redqa
  #2595·wshallwshall opened Oct 28, 2026Collaborator·

  ·
  6

• DB pools confirm autocommit; DatabaseRef gets the read-only gate and a row ceiling (BACKLOG #2148, #2617 slice 1)

  ci-redqa
  #2593·wshallwshall opened Oct 28, 2026Collaborator·

  ·
  6

• Vault hop refuses a proxy URL requests cannot send, and the privilege probe keeps no library ValueError text (BACKLOG #3454)

  ci-redqa
  #2592·wshallwshall opened Oct 28, 2026Collaborator·

  ·
  8

• URL credentials stay out of the egress host label and the scheme-read errors (BACKLOG #2686)

  qa
  #2591·wshallwshall opened Oct 28, 2026Collaborator·

  ·
  5

• Row seals under the vault_transit cipher via Transit HMAC (BACKLOG #2592, partial)

  ci-redqa
  #2565·wshallwshall opened Oct 27, 2026Collaborator·

  ·
  9

• Concurrent SHUTDOWN source stop: ADR 0157 Amendment B and a bounded outer cancel (BACKLOG #1620)

  qa
  #2560·wshallwshall opened Oct 27, 2026Collaborator·

  ·
  7

• Review standards: tighten CI scope boundaries, add R18-R23, and wire DOC_GUARDS

  ci-red
  #2550·wshallwshall opened Oct 27, 2026Collaborator·

  ·
  3

• Add a Greptile review config in .greptile/

  ci-red
  #2542·wshallwshall opened Oct 26, 2026Collaborator·

  ·
  13

• Reject and list dual-control requests that fail their seal (BACKLOG #3638, #3639)

  ci-redqa
  #2536·wshallwshall opened Oct 26, 2026Collaborator·

  ·
  7