Issues

• code answer: require a human-only capability to answer permission requests

  FootprintAI/Containarium#3191 · Filter by author NAre3 opened on Oct 27, 2026

• client: decode box-run responses with DiscardUnknown so an older client survives a newer daemon

  FootprintAI/Containarium#3190 · Filter by author NAre3 opened on Oct 27, 2026

• ssh keys: revoking a dropped key by fingerprint can revoke another account's registry entry

  security
  FootprintAI/Containarium#3187 · Filter by author hsinatfootprintai opened on Oct 27, 2026

• backup: narrow the verifier token so it cannot create, restore, delete or prune backups

  security
  FootprintAI/Containarium#3186 · Filter by author hsinatfootprintai opened on Oct 27, 2026

• netpolicy: refuse to trust bridges carrying instance veths as uplinks; document policy-routing and ECMP gaps (#3184 follow-ups)

  security
  FootprintAI/Containarium#3185 · Filter by author hsinatfootprintai opened on Oct 27, 2026

• code status: read the whole approval journal, not only the first 512 KiB

  FootprintAI/Containarium#3182 · Filter by author NAre3 opened on Oct 27, 2026

• backup: a tenant with no registered age recipient is stored in plaintext with no warning

  security
  FootprintAI/Containarium#3169 · Filter by author hsinatfootprintai opened on Oct 27, 2026

• k8s: ReadWriteMany VolumeBackend so VolumeService shared volumes work on the Kubernetes box backend

  feature requests
  FootprintAI/Containarium#3167 · Filter by author hsinatfootprintai opened on Oct 27, 2026

• netpolicy eBPF: virtual-patch deny and flow accounting assume ihl=5 and ignore IP fragments

  security
  FootprintAI/Containarium#3166 · Filter by author hsinatfootprintai opened on Oct 27, 2026

• Managed read-only toolchain volume for BUILD_TOOLS runs (#2944 slice 3)

  enhancementfeature requestssize:L
  FootprintAI/Containarium#3164 · Filter by author hsinatfootprintai opened on Oct 26, 2026
  1

• release: make verify-release the documented rollout gate

  chorecimodel:sonnetphase-2-optimizeruntime:claudesize:S
  FootprintAI/Containarium#3156 · Filter by author hsinatfootprintai opened on Oct 26, 2026
  1

  

• deps: move RFC3161 modules to patched pkcs7/timestamp once on Go 1.27

  chore
  FootprintAI/Containarium#3153 · Filter by author hsinatfootprintai opened on Oct 26, 2026

• Sprint 2026-W46 (resilience track): a full pool or hung Incus leaves the platform visible and recoverable

  epicsprint
  FootprintAI/Containarium#3132 · Filter by author hsinatfootprintai opened on Oct 26, 2026

• daemon: bind the health port before the core-container and Postgres waits and report degraded (from #3044)

  bugmodel:opusneeds-verificationphase-1-flowruntime:claudesize:Msprint
  FootprintAI/Containarium#3130 · Filter by author hsinatfootprintai opened on Oct 26, 2026
  3

  

• pool headroom: prove the capacity alert fires end to end (from #3043)

  enhancementmodel:sonnetneeds-verificationphase-1-flowruntime:claudesize:Ssprint
  FootprintAI/Containarium#3129 · Filter by author hsinatfootprintai opened on Oct 26, 2026
  2

  

• pool headroom: refuse snapshots and creates below a hard floor; show pool nearly full in host status (from #3043)

  enhancementfeature requestsmodel:opusneeds-verificationphase-1-flowruntime:claudesize:Msprint
  FootprintAI/Containarium#3128 · Filter by author hsinatfootprintai opened on Oct 26, 2026
  6

  

• backup: sweep stale box-backup spill files; strengthen spill tests and lane coverage

  chore
  FootprintAI/Containarium#3126 · Filter by author hsinatfootprintai opened on Oct 26, 2026
  1

• Sentinel sshpiperd keeps the 30 s login grace after a binary-only rollout; device approval then drops logins

  FootprintAI/Containarium#3125 · Filter by author hsinatfootprintai opened on Oct 26, 2026
  2

• Sprint 2026-W45 (release track): a tagged release builds, signs and verifies in bounded time

  epicsprint
  FootprintAI/Containarium#3122 · Filter by author hsinatfootprintai opened on Oct 26, 2026
  3

• ci: deploy-binary.sh rollback follow-ups (sentinel health, knobs docs)

  cimodel:sonnetphase-2-optimizeruntime:claudesize:Msprint
  FootprintAI/Containarium#3108 · Filter by author hsinatfootprintai opened on Oct 26, 2026
  1

• agent-runtime: re-prompt follow-ups (shell-only edits, usage, tests, dev verification)

  chore
  FootprintAI/Containarium#3107 · Filter by author hsinatfootprintai opened on Oct 26, 2026
  2

• integrity self-measurement can't digest the embedded BPF object; peer-pki bootstrap logs 503 on every start

  bug
  FootprintAI/Containarium#3079 · Filter by author hsinatfootprintai opened on Oct 26, 2026
  3

• zap: scans are enqueued and fail repeatedly on hosts where ZAP was never installed; no preflight, no visible status, no auto-install

  feature requests
  FootprintAI/Containarium#3078 · Filter by author hsinatfootprintai opened on Oct 26, 2026
  1

  

• proof-pack: verify a sealed pack from a client via a VerifyProofPack API

  enhancementfeature requestsmodel:opusphase-2-optimizesize:M
  FootprintAI/Containarium#3064 · Filter by author hsinatfootprintai opened on Oct 25, 2026
  2

  

• release: the air-gapped bundle must fail the build when apt/ or images/ is empty, and actually populate apt/

  bugmodel:opusneeds-verificationphase-1-flowsize:Msprint
  FootprintAI/Containarium#3061 · Filter by author hsinatfootprintai opened on Oct 25, 2026
  3