Repository navigation
Help Assistant Internals 3 Answers And Misses
Part 3 of 3. Part 1: from help pages to an index Β· Part 2: the hybrid search Β· Every design question, answered
Part 2 ended with five ranked sections and a judgement of how sure the search is. This page covers what happens next: the ladder of what the assistant can do with whatever is set up, the optional chat AI that writes an answer, permissions, the list of questions the help could not answer, and the traps found on the way.
Nothing about the assistant needs AI. Each thing an admin adds raises it a level, and each level falls back to the one below when something is missing or fails:
| Level | Needs | What the asker gets | helpAssistantLevel() |
|---|---|---|---|
| Search help | nothing | canned line + help cards, ranked by words (BM25) | search |
| + matching by meaning | an embedding model (key) | the same, ranked by words and meaning merged | search_meaning |
| + written answers | a chat AI (key) | a written answer in their language, citing the help | ask |
| both | both | the AI is given the merged results - the full hybrid | ask |
flowchart TD
Q[Question] --> W[Word search - always]
W --> V{Embedding model<br>ready?}
V -- yes --> M[Merge words + meaning]
V -- no / fails --> R[Words alone]
M --> A{Written answers<br>on?}
R --> A
A -- no --> C[Canned line + cards]
A -- yes --> AI[Chat AI reads top 4 sections]
AI -- answer --> ANS[Answer + 'From the help' cards]
AI -- NOT_COVERED --> NC[Honest line + closest cards<br>+ unanswered list]
AI -- error / no credit --> C
The two AI jobs are separate settings with separate keys (namespaces help_embed and help_ai) - so they can be different providers. The embedding model only chooses sections; the chat AI only reads text. That is why Claude Haiku writing answers works perfectly well with OpenAI's vectors choosing what it reads: Haiku never sees a vector.
The System page's first panel says this in plain words before any key field - "The help assistant works without AI" - with a live "Right now: Search help" line showing the current level.
includes/help_ask.php. helpAssistantAnswer() runs the search exactly as in part 2, then, if helpAskReady() (switch help_ask_enabled plus a configured help_ai provider), calls helpAskAnswer().
- The best four sections, numbered
[1]-[4](HELP_ASK_SECTIONS). - Each up to 3,000 characters (
HELP_ASK_SECTION_CHARS), taken from the passage the search matched when the section is long -helpRank()returns its bestpassagefor this. Tickets β Settings is 10,000 characters; the AI gets the Departments part. - Sections in the asker's language where they exist (part 1's per-section fallback), so menu names come out as the asker sees them.
- A label
[needs permission the user does not have]on sections the asker cannot act on (section 4). - The question - which never includes ticket data, names or anything else from the database. The AI sees help text and the question, nothing more.
helpAskSystemPrompt(), in short:
- Only the numbered sections (and any fetched with
search_help) - never other products, never general IT knowledge. - Never invent a menu, button, field or page; write names exactly as the sections do - they are the words on the screen.
- Answer in the user's language, by name ("Hungarian"), or the question's language if clearly different - keeping screen names as written.
- Brief; start with the answer. Never "Based on the help sectionsβ¦".
- Check the sections really are about the question (analysts are not requesters). If not, or the question is not in English, call
search_helpin English - up to twice. ThenNOT_COVERED, never a guess. - Without the permission: say who can do it, not how.
- End with
SOURCES: 1, 3. - Signpost: the way there as a bold path starting from the module - Tickets β Settings β Departments, System β Database verification - each step in the sections' own words and language (German: Tickets β Einstellungen β Abteilungen). Each section is labelled with its module's menu name for this, because the help writes paths from inside the module ("Settings β Renewals"); the help page's name ("LMS guide") is never a step.
{ "name": "search_help", "parameters": { "words": "English search words" } }It runs helpRank() over the analyst's own sections (permissions still apply) and returns new numbered sections, continuing the numbering, so SOURCES: can cite them. This is how a language with no help files gets answered: the AI translates by searching in English itself. The design originally had a separate translation call; this replaced it for free.
For the same reason, a question where the search found nothing still goes to the AI - before that change, Hungarian and Polish questions never reached it.
helpAskParse():
| The AI wrote | Becomes |
|---|---|
text + SOURCES: 2, 5
|
kind answer: the text, and "From the help" cards for sections 2 and 5 (numbers it was never given are ignored) |
NOT_COVERED, alone or with an explanation after it |
kind not_covered: "The help doesn't seem to cover that. These are the closest sections:" + three cards, and the question joins the unanswered list |
| nothing usable, an error, no credit | the plain search reply from part 2 |
Inline [1] markers and the SOURCES line are removed. The window builds the answer from text nodes (line breaks and **bold** only) - it is model output and never goes through innerHTML.
Claude Haiku, the 65-question set, answer citing a right section:
| Plain (47) | Exact (6) | Vague (6) | Other language (6) |
|---|---|---|---|
| 46 | 6 | 5 | 3 + 1 honest "not covered" |
About 2.7 seconds and ~3,000 tokens in, ~150 out - around a third of a penny a question. Polish and Hungarian come back in Polish and Hungarian with the English menu names kept.
Known miss: a Spanish question about resetting an analyst's password is answered from Tickets β Users (requesters). System help is English only, so the Spanish words do not reach it, and the model did not search in English. It goes away when System help moves into the language files.
| Step | Time | Cost |
|---|---|---|
| Word search (722 sections, 1,853 passages) | ~80 ms | free |
| Embed the question | ~0.4 s | a tiny fraction of a penny |
| Compare with the candidate vectors | ~16 ms | free |
| Written answer (Haiku) | ~2.7 s | ~0.3p |
| Rebuilding all vectors (722 sections, batches of 64) | a minute or two, in the background | about a penny (none at all for the shipped model) |
The help is never read at question time - the index (part 1) is built ahead. The AI sees four sections, not 74 pages.
Two layers:
-
Modules.
helpSectionsFor()keeps only sections from modules the analyst can open (analystCanAccessModule()), plus pages that belong to no module. The AI'ssearch_helpsearches the same filtered set. An analyst without Contracts can never be shown Contracts help - by the search or the AI. -
Permissions inside a module. A section marked
data-cap="tickets.manage"(the settings help of eleven modules) is still shown - knowing a setting exists is useful - but labelled for the AI, and rule 6 makes the answer "An administrator, or someone with Tickets management rights, can do this" rather than the steps.helpAskCapHeld()counts an umbrella permission as held when the analyst has any permission of that module.
api/help_assistant/ is exempt from the module-access coverage test (with a written reason): the assistant belongs to no module and filters per section instead.
The whole point of asking a help system questions is finding out where the help is thin. helpAssistantShouldRecord() records replies of kind none, weak and not_covered in help_assistant_unanswered, shown on System β Help assistant with Dealt with buttons.
TRAP: help missing for this asker is not help missing. An analyst without Contracts asks about contract renewals; their search finds nothing - but the help exists. Recording it would send admins hunting for a gap that isn't there.
helpAssistantRecordUnanswered() asks the question again, search only, as an all-modules administrator. It skips recording only when that wider search finds a good answer in a module the asker cannot open. A not_covered from an AI that could see the right module is still recorded - the help is there but not good enough.
- Event
help.unanswered, flaggedadmin_only- it is filtered out ofeffectivePreferences()for everyone else, so non-admins never even see it in their notification settings. - Every entry uses
entity_id1, so they coalesce into one bell entry ("5 unanswered help questions") instead of one per question. - The actor is the asker - and notifications never go to their own actor, so the asker is never told their question was flagged.
- It links to
system/help-assistant/#unanswered(entity_links.php).
By default the list says "an analyst". An admin can tick Record who asked per analyst (analysts.help_assistant_named); that analyst's window then shows a notice saying so. Privacy is the default, honesty when it is switched on.
Lifecycle: conversations are personal (deleted with the analyst); unanswered rows' analyst_id and dealt_by are history (kept, shown as a former analyst).
assets/js/help-assistant.js, assets/css/help-assistant.css, injected on every analyst page by renderHeaderRight() β helpAssistantWidgetRender().
- Draggable on desktop, a bottom sheet on a phone. Position remembered in the browser.
- The conversation is stored on the server per analyst (
help_assistant_messages, last 200 kept), so it survives moving between pages and devices, and goes only when Reset is clicked. - Clicking a result on the same page scrolls the right panel to the section itself; on another page, it stores the target and that page scrolls once loaded.
TRAP: the browser's own jump to
#anchorscrolls the whole document, pushing the fixed top bar off the screen (Ed spotted this in the first hour).reveal()puts the document back to the top and scrolls the panel that holds the section, 20 px below its top.
TRAP: a PHP patch script turned
\ninside a JavaScript regex into a real line break - a syntax error that stoppedhelp-assistant.jsloading, so the whole window vanished. Every PHP test passed. A headless Chrome load of the real page caught it. Any JS edited by a script gets a browser check.
Every trap found building this, in one place (details in the part named):
| Trap | Part |
|---|---|
| Reading help files as text misses everything PHP adds - render them | 1 |
A rendered page must be one process each; I18n::pinLocale() is CLI-only |
1 |
| A background worker on Windows must never print - the closed pipe kills it | 1 |
| Whole sections bury a card in a long section - score passages | 2 |
| A stemmer's rules must chain | 2 |
| Every question has a nearest vector - use a floor | 2 |
| Embed the question with the model in use, not the one chosen | 2 |
| Help quoting the test questions flatters the measurement | 2 |
| The end of the user message beats the system rules for format | 3 |
| A keen model searches every round and returns no text - one final call without tools | 3 |
| A model sometimes writes a tool call as text - keep what follows | 3 |
| A non-English question with no word matches must still go to the AI | 3 |
| Help missing for the asker is not help missing - the wide check | 3 |
| The browser's anchor jump hides the top bar | 3 |
\n in JS from a PHP patch - browser-check |
3 |
| An English example in a rule is copied into other languages (Tickets β Settings β Abteilungen) | 3 |
| NOT_COVERED can come last, after narration - check every line | 3 |
kind VARCHAR(10) truncated not_covered - widened to 20, DB Verify fixes old installs |
3 |
| Readiness must check every table, or code that arrives before DB Verify says "Something went wrong" | 3 |
| Tests written before Ask existed started calling the real AI on an install with it on - they force it off | 3 |
A new help page - nothing to do beyond the house style (and writing help it answers well): sections with ids and an h3, data-cap on settings sections. The out-of-date warning appears; Rebuild indexes it. Add a question for it to tests/help-search-questions.php.
A new embedding provider - add it to aiEmbeddingPayload(), aiEmbeddingUrl(), aiEmbeddingHeaders() and aiEmbeddingModels() in includes/ai_embeddings.php (see Embeddings developer guide). Knowledge and the help assistant both get it. Never a fifth copy of the embedding call - tests/ai-embeddings.php guards against it.
A new chat provider - nothing: help_ai uses the shared AI panel and request code.
Tuning a threshold - never by feel. Change the constant, rerun the question set (php tests/help-search.php for words; help-vectors.php for the merge, from cached vectors at no cost), and keep it only if the numbers say so. Record the before and after in the developer guide.
Adding a question to the set - a realistic wording a real person would type, every section that is a right answer, and its kind. Do not reuse a question's wording in help text (part 2's trap).
Shipping vectors - php scripts/help_vectors_export.php at every release (RELEASING step 3b).
See also: Every design question, answered Β· Help assistant developer guide Β· Design Β· User page
FreeITSM β an open-source IT Service Management platform Β· github.com/edmozley/freeitsm Β· MIT licence
- Installation
- β° Scheduled tasks (cron jobs)
-
Architecture
- β³ π§Ή Root folder tidy (URL routing)
- β³ π Database Integrity (FKs & constraints)
- β³ π οΈ Database Verification β Developer Guide
- β³ π§© Service Layer (UI + API share code)
- β³ πͺ€ Code traps (the TRAP: comments)
- β³ π Commenting for the Engineering wiki
- β³ π οΈ Engineering wiki scanner - Developer Guide
- β³ π Service-Layer progress
- π€ Contributing (read before a pull request)
- π§ͺ Developer tests
- π PDF exports moved to PDFKit (#254)
- AI Providers
- Internationalisation (i18n)
- Timezones & Time Handling
- π Date & Time Formats
- π± Currencies
- π§ The sidebar (optional module rail)
- π§© Preference templates
- π Display order (modules, Watchtower cards) β Developer Guide
- Theming & Dark Mode
- ποΈ Recent β getting back to what you were doing
- β¨οΈ Command palette (βK)
- π Searching inside tickets
- π Attached documents
-
MobileβFriendly
- β³ π« Mobile: Tickets
- β³ π» Mobile: Assets
- β³ π Mobile: Calendar
- β³ π Mobile: Knowledge
- β³ π¦ Mobile: Service Status
- β³ πΌ Mobile: Watchtower
- β³ π§© Mobile: Problem Management
- β³ π Mobile: Change Management
- β³ πΏ Mobile: Software
- β³ β Mobile: Tasks
- β³ π Mobile: Forms
- β³ π Mobile: Contracts
- β³ π Mobile: Domains
- β³ π Mobile: People
- β³ π Mobile: Projects
- β³ ποΈ Mobile: Files
- β³ π Mobile: LMS
- β³ πΊοΈ Mobile: CMDB
- β³ πΊοΈ Mobile: Network Mapper
- β³ π§ Mobile: Process Mapper
- β³ βοΈ Mobile: Workflow
- β³ π₯οΈ Mobile: System
- β³ π Mobile: Reporting
- β³ π Mobile: System Wiki
- β³ π Mobile: Self-Service Portal
- β³ π§° Mobile: Techniques & Tricks
-
Security
- Layer 1 β which modules you can enter
- β³ π§© Module Access Control
- β³ π οΈ Module Access β Developer Guide
- β³ π Switching modules off
- β³ π οΈ Module availability β Developer Guide
- β³ π Module availability β design (#217)
- Layer 2 β what you can administer
- β³ π Roles & Permissions
- β³ π οΈ Roles β Developer Guide
- β³ π€ Why capabilities are constants
- Layer 3 β the System module
- β³ π Admin Access Control
- Hardening
- β³ π Security review response 2026-08
- β³ π‘οΈ Security hardening 2026-08
- β³ π οΈ Security hardening 2026-08 β Developer Guide
- β³ π‘οΈ Round three β plain English
- β³ π οΈ Round three β Developer Guide
- β³ π‘οΈ CSRF protection (S4) β Developer Guide
- Single Sign-On (SSO)
- ποΈ LDAP & Active Directory
-
π¦ Microsoft Entra ID
- β³ π₯ Importing people and groups
- β³ π» Intune: assets to their primary user
- β³ π’ Organisation chart
- β³ π οΈ Entra directory sync β Developer Guide
- β³ π οΈ Entra import - review (#235)
- β³ π οΈ Entra follow-ups - review (#237-#240)
- β³ π οΈ Intune primary user - review (#236)
- β³ π οΈ Organisation chart - reviews (#242, #265)
- π CardDAV contact sync
- Browser Extension
- API Reference
-
π REST API β how it works
- β³ π Proposal: custom fields, inventory import and change evidence (#194)
- β³ π οΈ Custom fields, evidence + inventory - review (#195-#197)
- β³ π οΈ Long forms in a task's Work view - review (#198)
- β³ π οΈ Empty Procedures fold - review (#247)
- β³ π« REST API: Tickets
- β³ π» REST API: Assets
- β³ π΄ REST API: Problems
- β³ π REST API: Changes
- β³ π REST API: Knowledge
- β³ β REST API: Tasks
- β³ ποΈ REST API: CMDB
- β³ π REST API: Contracts
- β³ ποΈ REST API: Calendar
- β³ πΏ REST API: Software
- β³ π REST API: Domains
- β³ π¦ REST API: Service Status
- β³ βοΈ REST API: Morning Checks
- β³ π REST API: Forms
- β³ βοΈ REST API: Workflow
- β³ π·οΈ REST API: Cost centres
- β³ π REST API: Chart of accounts
- β³ π REST API: Projects
- β³ π‘οΈ API threat protection
- β³ π§βπΌ REST API: Analysts
- β³ πΊοΈ REST API: Network Mapper
- β³ π§ Using the API docs page
- β³ π OpenAPI specification
- β³ β OpenAPI: kept correct
- β³ π οΈ Maintaining the catalogue
- Watchtower
-
Tickets
- β³ π Live updates
- β³ π οΈ Watching a ticket - Developer Guide (1 of 2)
- β³ π οΈ CSAT delay and reminder - Developer Guide
- β³ π οΈ Ticket checklist step types - Developer Guide (1 of 2)
- β³ π οΈ Right-click Attach checklist - Developer Guide
- β³ π οΈ Checklists in the REST API - Developer Guide
- β³ π οΈ Inbox.js map β Developer Guide
- β³ π οΈ Floating windows & the file viewer β Developer Guide
- β³ π οΈ Tickets settings β Developer Guide
- β³ π Simpler ticket and task forms - design (#218)
- β³ ποΈ The ticket workspace
- β³ π Forms on tickets
- β³ π The ticket table
- β³ π Rota copy and paste β Developer Deep Dive
- β³ β Checklists & SOPs
- β³ βοΈ Mandatory fields
- β³ π§Ύ Custom ticket fields
- β³ π·οΈ Ticket categories
- β³ π§Ύ A type for every new ticket
- β³ π₯ Assigning tickets to a team, and escalation
- β³ π’ One board across every company
- β³ π Ticket dashboard β Developer Guide
- β³ Mailbox Authentication
- β³ π€ Email send log
- β³ π Attachment size limits and large emails
-
β³ Basic IMAP mailboxes
- β³ π Basic IMAP without the PHP extension (#257)
- β³ π οΈ Basic IMAP client β Developer Guide
- β³ π§ͺ Basic IMAP client β Testing and verifying
- β³ π οΈ Basic IMAP - Sent copy - Developer Guide (#270)
- β³ π οΈ Verifying a mail folder β Developer Guide
- β³ π οΈ Mailbox providers β Developer Guide
- β³ π οΈ How Gmail mail collection works β Developer Guide
- β³ Email rendering & images
- β³ SLA Management
- β³ WhatsApp channel
-
β³
βοΈ Telegram channel - β³ β CSAT company scope and filters β Developer Guide
- β³ π₯ Microsoft Teams channel
- β³ π¨οΈ Mattermost channel
- β³ π¬ Web chat channel
- β³ π£ Slack channel
- β³ π Linking tickets
- β³ β Record previews
- β³ π Ticket notes: internal or shared
- β³ ποΈ Canned responses
- β³ βοΈ Limiting replies to particular senders
- β³ π¨ Telling the analyst a ticket is theirs
- β³ βοΈ Email signatures
- β³ π The public web address
- β³ π’ Ticket numbering
- β³ π Raising a ticket for someone else
- β³ π Merging tickets
- β³ π Confidential tickets
- β³ π₯ Portal managers
- β³ π Who has seen a ticket
- β³ π Reading long tickets
- β³ β Splitting tickets
- β³ β Selecting several tickets
- β³ ποΈ The folder pane
- β³ π½ Just my tickets, or no closed ones
- β³ π οΈ Snoozing tickets β Developer Guide
- β³ π₯ Collision detection
- β³ β±οΈ Time tracking
- β³ π Case reports - a ticket and its work as one PDF
- β³ π Scheduled work in your own calendar
- Problem Management
-
Tasks
- β³ π οΈ Task board and subtasks β Developer Guide
- β³ π§βπ€βπ§ People on a task ("Involved")
- β³ π Repeating tasks
- β³ π’ Moving a task between companies
- π Projects
-
Assets
- β³ π’ Moving an asset between companies
- β³ π Shared asset locations
- β³ π§βπΌ Assigning assets to analysts
- β³ π Warranty and lease alerts
- β³ π Leases
- β³ π Saved table views
- β³ π¨οΈ Recording anything, and importing it
- β³ π§© Asset type layouts
- β³ π Inventory freshness
- β³ π Linked configuration item
- β³ π Connected assets
- β³ π Asset review
-
β³ π·οΈ QR asset labels
- β³ π οΈ QR asset labels β Developer Guide
- β³ π Asset label designer - design (#229)
- β³ π· Asset scanning β Developer Guide
- β³ π οΈ Asset tag numbering β Developer Guide
- β³ π οΈ Asset reconciliation β Developer Guide
- β³ π οΈ Reconciliation, tags + labels - review (#164)
- β³ π Who holds what, and handover documents
- β³ π₯οΈ The inventory agent (PowerShell)
- β³ ποΈ Proxmox VE servers
- β³ βοΈ VMware Cloud Director servers
- β³ πͺ Hyper-V and Failover Clusters
- β³ π Linking equipment to tickets
- β³ βοΈ Follow-up tasks on a ticket
- Knowledge
- Change Management
- Calendar
- Morning Checks
- Reporting
- Software
-
Forms
- β³ π¨ The form designer β Developer Guide
- β³ π Layout & the grid β Developer Guide
- β³ ποΈ Collections β grouping submissions
- β³ π Submissions as PDFs
- β³ β‘ What happens next β a form's own actions
- β³ π οΈ Sections & conditional logic β Developer Guide
- β³ π οΈ Lookup fields β Developer Guide
- β³ π‘οΈ Catalogue request approvals
- People
- Starters & leavers
- Domains
- ποΈ Files
- Contracts
- Service Status
- π Notifications
- π¨ War Room
- Self-Service Portal
- LMS
- Process Mapper
-
CMDB
- β³ π οΈ CMDB β Developer Guide
- β³ π οΈ Impact analysis β Developer Guide
- β³ π οΈ Data quality β Developer Guide
- β³ π Linked assets
- β³ π Linking an asset to its CI - design (#201)
- β³ π Discovery and redundancy-aware impact - design (#199)
- β³ π οΈ Relationship wording - review (#297)
- Network Mapper
-
Workflows
- β³ π οΈ Workflow engine β Developer Guide
- β³ π οΈ Workflows for tasks β Developer Guide
- β³ π οΈ Workflow notes on a ticket β Developer Guide
- β³ π οΈ Workflow category routing β Developer Guide
- β³ β° Time-Based Triggers
- β³ πͺ Webhooks
- β³ π¬ Webhook Message Formats
- β³ π HTTPS Certificates & CA Bundles
- β³ π οΈ SSL Verification β the Global Setting
- β³ π Workflow & Webhook Pitfalls
- Issue trackers (Jira, Azure DevOps)
- π‘ Zabbix (monitoring)
- π¬ Microsoft Teams alerts
- π 3CX (phone system)
-
System
- β³ π οΈ Preferences β Developer Guide
- β³ π§Ή Maintenance
- β³ π Finding people in the Analysts list
- β³ πͺ When an analyst leaves
- β³ π οΈ System β Branding β Developer Guide
- β³ π©Ί Page health (D019) β Developer Guide
- β³ β Feature Bingo
- β³ π·οΈ Cost centres
- β³ π Chart of accounts
- β³ π· Photo Album
- β³ Demo Data
- β³ π οΈ Demo Data β Developer Guide
-
Overview
- β³ π Progress tracker
- β³ Concepts & vocabulary
- β³ Email routing & mailboxes
- β³ Settings: global vs per-company
- β³ Users & self-service
- β³ Staff cross-company access
- β³ One company supporting another
- β³ π’ One board across every company
- β³ Worked examples
- β³ Pitfalls & gotchas
- β³ Scope: what it's for
- β³ π οΈ Developer Guide (make a module multi-company)
- β³ ποΈ Case study: CMDB (a linked graph)
- β³ π§ͺ Test harness (prove it's isolated)
- What this is
-
π Bugs resolved
- β³ π Small fixes in 5.1.0
- β³ π CMDB relationships read backwards (5.1.0)
- β³ π #301 CSAT delay was never applied
- β³ π #281 Comments imported from Jira never arrived
- β³ π #288 A change failed to open with Enforce approvals on
- β³ π Long non-Latin articles never got an embedding
- β³ π« #280 Email lookups scanned the whole table
- β³ β #266 Dragging a task told nobody
- β³ π #255 Article previews showed HTML codes
- β³ π #252 A link to a Knowledge article did not open
- β³ π #254 PDFs could not print Polish
- β³ π #250 Clicking a folder left the open article on screen
- β³ π« #260 The dashboard cog did nothing
- β³ π« #248 A department rule never matched on four routes
- β³ π A directory account could be matched to someone else
- β³ π« #244 Reply went to the assigned analyst
- β³ π Mailbox sign-in was not checked
- β³ π Four weaknesses around signing in
- β³ π A lookup answer could name any record
- β³ π« #227 A mailbox could not be deleted
- β³ π« #226 A picture on a note could not be closed
- β³ π» #222 The Assets page never loaded in 4.3.0
- β³ βοΈ #214 A "contains" condition did not match capitals
- β³ βοΈ #216 A workflow email from a chosen mailbox always failed
- β³ π³ The Docker image was missing PHP extensions
- β³ π A failed DNS lookup read as a missing record
- β³ π A link could change data
- β³ π Access outlived its removal
- β³ π Knowledge articles could run scripts
- β³ π Knowledge writes ignored permissions
- β³ π Company boundaries (Oct 2026)
- β³ π Smaller gaps (Oct 2026)
- β³ π Escaped text could leave its attribute
- β³ π Task descriptions were not cleaned
- β³ π Task documents ignored company scope
- β³ π Repeating tasks ignored company scope
- β³ π¬ #183 Mailbox checks overlapped
- β³ π #188 Transfer lock shown off when unknown
- β³ β #184 Subtask names and Overdue
- β³ π§© #186 Teams: the buttons did nothing
- β³ π Text in a change could run script
- β³ π AI settings changed without the AI permission
- β³ πͺ #178 Deleting an analyst failed
- β³ π« A team with no departments showed 0 tickets
- β³ π Projects: adding a phase did nothing on Save
- β³ π Leavers could still sign in
- β³ πΌοΈ Logo and courses broke on Apache with PHP-FPM
- β³ π’ Chat tickets ignored your ticket numbering
- β³ π Dates shown as a dash, or in server time
- β³ π Assets β Users showed people from other companies
- β³ π Restricted analysts could read other modules' data
- β³ πΌοΈ Replies with a picture in the thread failed to send
- β³ π Reply attachments never reached the customer
- β³ π οΈ Outbound email attachments β Developer Guide
- β³ π A global SSO provider was missing from the portal
- β³ π Behind a proxy, the SSO redirect said http
- β³ βοΈ The portal tagline moved when you saved it
- β³ π¨ The portal settings screen forgot what you saved
- β³ π‘οΈ The approvals inbox said "Error" and nothing else
- β³ π A table's answers were missing from the PDF
- β³ β A single-select column let you tick every option
- β³ π The portal ignored a form's field widths
- β³ π The tasks board stopped taking clicks
- β³ ποΈ #121 The index list is out of date after upgrading
- β³ π #133 The calendar subscription was empty
- β³ π #131 Tasks always reopened on the board
- β³ π₯ #129 Every page returned HTTP 500 after upgrading
- β³ π³ #127 A PHP warning above the System page
- β³ π #126 Notes stamped with the server's clock
- β³ π Storing every date in UTC
- β³ πͺ The portal was down for everyone signed in
- β³ βοΈ #120 Workflow notes could never be written
- β³ βοΈ #123 Three errors when running Database Verification
- β³ π #122 The description box was a stub in the corner
- β³ π£ Demo data deleted real accounts
- β³ π #117 Sign-in redirected to the wrong address
- β³ π¨ #108 The priority dot was invisible
- β³ β±οΈ #116 Time logged from the right-click menu
- β³ π #114 API keys refused by our own guard
- β³ ποΈ #110 Assigning a task told nobody
- β³ πͺ #107 Signed out while still working
- β³ π #103 "Share with Requester" reached nobody
- β³ π #102 Search found nothing for hyphens
- β³ πͺ #101 Source code editor opened behind
- β³ βοΈ #88 Subtasks could not be ticked off
- β³ π» #84 Asset deep link selected nothing
- β³ π« #79 A new ticket arrived with no status
- β³ π§ #79 A ticket from email did not say so
- β³ π #78 Bell opened to nothing
- β³ π¬ #77 Mail only collected from Inbox
- β³ π #74 The default password could not be changed
- β³ π¦ #70 Renaming an impact level
- β³ π€ #67 App-only mailboxes could not send
- β³ π #45 Verify only ever worked for Microsoft
- β³ π #45 IMAP reported as not authenticated
- β³ βοΈ An email template stopped escaping itself
- β³ π The portal dashboard showed the wrong time
- β³ π’ The folder said 99 and the list showed 96