2026-06-23 - 2026-06-26
Overview
23 Pull requests merged by 3 users
Merged
#270 PRD: Separate agent and bottle selection
Merged
#278 ci: add coverage.py reporting
Merged
#280 test: fix integration coverage failures
Merged
#272 PRD: Multi-parent extends: for bottles
Merged
#282 Remove capability apply
Merged
#279 Add ripgrep to agent images
Merged
#276 Fix unescaped quotes/newlines in YAML and gitconfig emitters
Merged
#271 Add explicit timeouts to subprocess and HTTP calls in git-gate paths
Merged
#275 Typed error taxonomy for supervise RPC dispatch
Merged
#274 Harden CGI status-line parsing in git_http_backend
Merged
#273 Anchor relative Dockerfile path to build context
Merged
#267 fix: route remote control through provider startup args
Merged
#266 Validate proposed egress config
Merged
#264 PRD: LOG_FULL egress logging credential redaction
Merged
#263 PRD: Strengthen outbound exfiltration detection
Merged
#265 feat(provider): support startup args settings
Merged
#262 PRD: Egress token-block policy (supervise / redact / block)
Merged
#260 Add leveled severity and structured context to log wrappers
Merged
#250 Default the supervise flag to true
Merged
#211 docs: document egress route fields
Merged
#228 PRD: Gitleaks inline suppression supervision
Merged
#240 PRD: Commit bottle state to an image
Merged
#248 Fix Codex supervise MCP registration
14 Pull requests proposed by 1 user
Proposed
#284 feat(smolmachines): run backend on Linux
Proposed
#285 PRD: Egress control plane — metering, budgets, and forced cutoff
Proposed
#290 Cover egress_addon adapter and remove coverage omit
Proposed
#291 Split DLP detector-config parsing into its own module
Proposed
#292 Flatten deep nesting in _multiselect_loop
Proposed
#293 Table-drive token-pattern detector tests
Proposed
#294 Risk-weighted coverage policy + diff-coverage gate (ADR 0004)
Proposed
#295 Ratchet egress_addon coverage to >=90% (ADR 0004)
Proposed
#296 Ratchet yaml_subset coverage to >=90% (ADR 0004)
Proposed
#297 Ratchet egress_addon_core coverage to >=90% (ADR 0004)
Proposed
#298 Ratchet git_gate coverage to >=90% (ADR 0004)
Proposed
#299 Ratchet manifest + manifest_agent coverage to >=90% (ADR 0004)
Proposed
#300 Ratchet supervise coverage to >=90% (ADR 0004)
Proposed
#301 Add auto-updated core coverage badge (ADR 0004)
17 Issues closed from 3 users
Closed
#269 Remove bottle from agent manifest
Closed
#277 Add coverage reporting to CI
Closed
#268 Support multiple parents in bottle extends:
Closed
#281 Remove capability apply
Closed
#258 Hand-rolled egress/gitconfig YAML emitters don't escape quotes/newlines
Closed
#255 Audit network/subprocess calls for missing timeouts
Closed
#253 Typed error taxonomy for supervise RPC dispatch
Closed
#254 Harden CGI status-line parsing in git_http_backend
Closed
#256 Egress apply validates with load_routes but sidecar runs load_config (log: bypass)
Closed
#257 LOG_FULL egress logging captures injected Authorization and unredacted bodies
Closed
#259 Strengthen outbound exfil detection: canaries, broadened known-value set, fragmentation-resistant matching
Closed
#261 Allow supervisor to override egress blocks/allow requests
Closed
#252 Structured, leveled logging in log.py
Closed
#249 Remove the supervise flag
Closed
#208 git-gate: restrict gitleaks inline suppression to supervised exceptions
Closed
#194 Add a "commit" utility to store active agent bottle state
Closed
#247 Fix Codex MCP supervise registration after --transport CLI change
19 Issues created by 2 users
Opened
#251 Out-of-band egress enforcement & cost-control plane (forced cutoff + remote dashboard)
Opened
#254 Harden CGI status-line parsing in git_http_backend
Opened
#253 Typed error taxonomy for supervise RPC dispatch
Opened
#252 Structured, leveled logging in log.py
Opened
#255 Audit network/subprocess calls for missing timeouts
Opened
#257 LOG_FULL egress logging captures injected Authorization and unredacted bodies
Opened
#256 Egress apply validates with load_routes but sidecar runs load_config (log: bypass)
Opened
#258 Hand-rolled egress/gitconfig YAML emitters don't escape quotes/newlines
Opened
#259 Strengthen outbound exfil detection: canaries, broadened known-value set, fragmentation-resistant matching
Opened
#261 Allow supervisor to override egress blocks/allow requests
Opened
#268 Support multiple parents in bottle extends:
Opened
#269 Remove bottle from agent manifest
Opened
#277 Add coverage reporting to CI
Opened
#281 Remove capability apply
Opened
#283 Make smolmachines backed work on linux
Opened
#287 Decompose egress_addon_core.py detector-config parsing
Opened
#286 Cover egress_addon adapter and remove coverage omit
Opened
#288 Flatten deep nesting in tui.py and git_gate.py
Opened
#289 Table-drive DLP detector tests to cut boilerplate
1 Unresolved Conversation
Open
#209
PRD: Install script