Activity

1. senamakel

   assigned

   oxoxDev

   on Nov 9, 2026
2. tinysweeper

   added

   priority: p3

   on Nov 9, 2026
3. tinysweeper commented on Nov 9, 2026

   

   tinysweeperBot

   on Nov 9, 2026

   More actions

   Tracking issue for a one-off triage pass over all open PRs and issues (milestone Nov 9-13, parent #45). It is process/coordination work, not a bug or feature, and is low urgency since it is a scheduled housekeeping sweep rather than a broken path.

   Labelled priority: p3.
4. tinysweeper

   added the

   Task

   issue type on Nov 9, 2026
5. M3gA-Mind

   assigned

   M3gA-Mind

   and unassigned

   oxoxDev

   on Nov 11, 2026
6. M3gA-Mind commented on Nov 11, 2026

   

   M3gA-Mind

   on Nov 11, 2026

   Contributor

   More actions

   Status update, 2026-11-11 14:50 IST: issues closed #1. The tables below are the triage as it was done; rows for those items are now settled.

   tinysecurity: triage (tinysecurity#58, team#45)

   Official main 24921ba = v0.20.0. openhuman pins 17c1284 = v0.19.0, 4 first-parent commits behind. None of the behaviour below differs between the two.

   PRs

   None open.

   Issues

   Issue	Verdict	Reason	Next step
   #57 persist undecided approvals across restart + ListPending	still real (p2)	import_history stores every legacy row as inert Denied (engine.rs:1069-1077), ListPending is reserved (future.rs:141), and there's no pending filter. On CF, openhuman main's 2 storage_default_import_e2e legacy-approval tests FAIL at :176 ("list_pending returned 0 row(s)"). They've been stale since openhuman a26e3847a9 (10-25) moved list_pending to in-memory routes.	tinysecurity implements and releases. openhuman #[ignore]s or narrows those 2 tests now (pointing here), then does the host follow-up.
   #54 judge credential is init-only	still real (p2)	JudgeConfig.credential is init-only (policy.rs:394-396), the client is built once (judge.rs:96-97), and there's no callback. Since openhuman #8559 the judge is OFF for all desktops (modules/security/judge.rs:33-39).	Accept the lazy host-callback contract change and release; openhuman then turns the judge back on.
   #55 keyring reads need consent per operation	still real (p3)	Fresh consent before every op (adapter_crypto.rs:543-544), and no scope or TTL in KeyringConsent2. The issue's "48 prompts a minute" is outdated: openhuman's READ_CACHE (#8553) stops the repeats within a run. The remaining per-launch prompts are tracked separately on the openhuman side (related, not a duplicate). #8597 didn't touch this.	A maintainer decides the read-grant shape. openhuman fixes its per-launch prompts separately (load only the session profile at startup).
   #1 Build tinysecurity (umbrella)	stale: close as done	All 11 planned crates are on main, releases go through v0.20.0, and host tracker openhuman#7328 closed 10-24. Remaining work is #54/#55/#57.	Close; refresh the stale status line in docs/plans/security-module.md:3.
7. M3gA-Mind commented on Nov 12, 2026

   

   M3gA-Mind

   on Nov 12, 2026

   Contributor

   More actions

   Triage summary: this repo is at zero open PRs and zero open issues.

   Issues fixed and merged:

   • Protect the OCI credential directory (~/.oci) in the credential floor #59: the OCI CLI directory is protected in the credential floor (fix(policy): protect the OCI CLI directory in the credential floor #60).
   • Approval engine: persist undecided requests across restart and implement ListPending #57: an undecided legacy approval row is imported as a pending orphan (feat(approval): import an undecided legacy row as a pending orphan #61).
   • Judge credential is init-only, so hosts can't use a credential the module's own keyring holds #54: the judge credential is asked from the host on first use (feat(judge): ask the host for the judge credential on first use #64).
   • Keyring reads need a consent per operation, with no session-scoped grant #55: opt-in read grants for repeated keyring reads, keyed on agent, origin, tier and entry, with a 24-hour TTL held in memory only (feat(keyring): opt-in read grants for repeated keyring reads #65).

   Also merged:

   • fix(deps): bump rustix to 1.1.6 and xattr to 1.7.0 for RUSTSEC-2026-0486 #62: rustix 1.1.6 and xattr 1.7.0, clearing RUSTSEC-2026-0486.
   • fix(ci): pass the changed-line gate when no changed line is executable #63: the changed-line gate passes when no changed line is executable.
   • test(audit): give the native audit example a timeout its reinit phase fits #66: the native audit example gets a timeout its reinit phase fits.
   • Admit files-only sandbox plans on folder-jail executors (contract 2.2) #67: files-only sandbox plans are admitted on folder-jail executors (contract 2.2).
   • test: make coverage fast: optimize crypto deps in test builds, run capacity tests at test-scale caps #69: faster coverage runs.

   Nothing left open from this pass.
8. M3gA-Mind

   closed this as completedon Nov 12, 2026