-
Notifications
You must be signed in to change notification settings - Fork 1
All issues
Issue creation is restricted in this repository
Issues
is:issue state:open
is:issue state:open
Search results
E-34: hkm audit — pre-deploy security-posture command
effort:MMedium effortMedium effortenhancementNew capability or ergonomic upgradeNew capability or ergonomic upgradeimpact:highHigh impactHigh impactsecuritySecurity postureSecurity postureStatus: Open.E-33: Promote secrets retrieval to a first-class SecretsPort (caching, rotation, GCP)
effort:MMedium effortMedium effortenhancementNew capability or ergonomic upgradeNew capability or ergonomic upgradeimpact:highHigh impactHigh impactsecuritySecurity postureSecurity postureStatus: Open.E-32: Fluent CSP builder with per-request nonces + Permissions-Policy
effort:MMedium effortMedium effortenhancementNew capability or ergonomic upgradeNew capability or ergonomic upgradeimpact:medMedium impactMedium impactsecuritySecurity postureSecurity postureStatus: Open.E-31: Mutation testing (Infection) + enforced php-cs-fixer gate + Rector rulesets
effort:MMedium effortMedium effortenhancementNew capability or ergonomic upgradeNew capability or ergonomic upgradeimpact:medMedium impactMedium impactqualityQuality toolingQuality toolingStatus: Open.E-30: Shared contract test suites for the Port interfaces
effort:MMedium effortMedium effortenhancementNew capability or ergonomic upgradeNew capability or ergonomic upgradeimpact:highHigh impactHigh impactqualityQuality toolingQuality toolingStatus: Open.E-29: deptrac architecture-fitness tests encoding the five access rules
effort:MMedium effortMedium effortenhancementNew capability or ergonomic upgradeNew capability or ergonomic upgradeimpact:highHigh impactHigh impactqualityQuality toolingQuality toolingStatus: Open.E-28: Nightly/canary release channel
effort:MMedium effortMedium effortenhancementNew capability or ergonomic upgradeNew capability or ergonomic upgradeimpact:medMedium impactMedium impactreleaseRelease engineering & versioningRelease engineering & versioningStatus: Open.E-27: Sign release bundles + publish SBOM, SLSA provenance, and SHA256SUMS
effort:MMedium effortMedium effortenhancementNew capability or ergonomic upgradeNew capability or ergonomic upgradeimpact:highHigh impactHigh impactreleaseRelease engineering & versioningRelease engineering & versioningsecuritySecurity postureSecurity postureStatus: Open.E-26: Deprecation policy, @deprecated workflow, and automated UPGRADE guides
effort:MMedium effortMedium effortenhancementNew capability or ergonomic upgradeNew capability or ergonomic upgradeimpact:medMedium impactMedium impactreleaseRelease engineering & versioningRelease engineering & versioningStatus: Open.E-25: SemVer + stability-tier policy with @api/@internal
effort:MMedium effortMedium effortenhancementNew capability or ergonomic upgradeNew capability or ergonomic upgradeimpact:highHigh impactHigh impactreleaseRelease engineering & versioningRelease engineering & versioningStatus: Open.E-24: Per-release benchmark suite in CI
effort:MMedium effortMedium effortenhancementNew capability or ergonomic upgradeNew capability or ergonomic upgradeimpact:medMedium impactMedium impactperformancePerformancePerformanceStatus: Open.E-23: manifest:compile + cache:warm deploy commands
effort:MMedium effortMedium effortenhancementNew capability or ergonomic upgradeNew capability or ergonomic upgradeimpact:highHigh impactHigh impactperformancePerformancePerformanceStatus: Open.