ersatztv

chore(release): cut and promote v26.15.0 on 736649b3b (main head could not build an image) ad-hoc ci-cd priority: low

by timothy was closed 2026-08-30 17:29:20 +02:00

page_statuses still terminates on its first empty page — is /statuses/{sha} subject to #870's post-pagination filtering? ci-cd priority: medium security

#893

by timothy was closed 2026-09-02 22:20:46 +02:00

5 / 5

2

ETV_HOOK_FIRE_LIB is SOURCED from an env-var path in 12 hooks — a decoy tree's code runs inside the gate ci-cd priority: high security

#891

by timothy was closed 2026-08-30 23:41:20 +02:00

6 / 6

2

Every image build fails: completeAnnotations.guard.test.ts needs the git index, and the Dockerfile's exclude list is hand-maintained ci-cd priority: high

#887

by timothy was closed 2026-08-30 18:06:23 +02:00

5 / 5

13

release.verdict-vocabulary-shared explains the sentinel with a set -u mechanism that measurement refutes ci-cd priority: low

#886

by timothy was closed 2026-08-30 03:30:53 +02:00

0 / 3

1

Schedule-item recurrence fields: an omitted array means "never applies" on write but "unrestricted" on read priority: medium

#880

by timothy was closed 2026-08-30 11:29:03 +02:00

5 / 5

2

docs.no-session-narrative reaches hooks and code comments, but nothing has ever swept them — 4 known sites priority: medium

#876

by timothy was closed 2026-09-03 21:26:05 +02:00

4 / 4

3

The timeline walk's null terminator is defeatable: Gitea pages BEFORE it filters, so a page of inline-code comments reads as exhaustion ci-cd priority: medium security

#870

by timothy was closed 2026-08-30 13:29:39 +02:00

5 / 5

2

Finish the 1.25.4-dated CI claim sweep #747 deliberately did not complete ci-cd priority: medium

#869

by timothy was closed 2026-09-02 22:20:45 +02:00

4 / 4

2

Merge-gate branch-protection read: a malformed rule states a cause that did not happen, and the endpoint is now fetched twice ci-cd priority: medium

#859

by timothy was closed 2026-08-30 13:33:51 +02:00

5 / 5

2

pretooluse-merge-consent.sh resolves its verdict classifier from $CLAUDE_PROJECT_DIR — an env var as a security input priority: medium security

#858

by timothy was closed 2026-08-30 13:33:52 +02:00

6 / 6

2

Nothing couples ci-image.yml's push.paths to ci-image-pin's expected pathspec ci-cd priority: medium

#855

by timothy was closed 2026-08-30 21:25:24 +02:00

4 / 4

7

workflow_dispatch still loads attacker YAML from an arbitrary ref — four workflows, no ref restriction ci-cd priority: medium security

#853

by timothy was closed 2026-08-30 03:18:05 +02:00

4 / 4

2

review-verdict.yml post-write verification: three routes that leave an exemption success over a human failure ci-cd priority: medium security

#849

by timothy was closed 2026-08-30 07:55:12 +02:00

10 / 10

5

post-review-verdict.sh does not check that its own account is on the gate's H10_REVIEWERS allow-list ci-cd priority: medium security

#845

by timothy was closed 2026-08-30 04:43:09 +02:00

5 / 5

2

:latest images ship InformationalVersion 0.0.0 — a --depth=2 fetch grafts the build job's full clone shallow ci-cd priority: medium

#836

by timothy was closed 2026-08-30 01:55:30 +02:00

6 / 6

2

Guard the persist-credentials convention — after #744, with no exemption list ci-cd priority: low security

#835

by timothy was closed 2026-08-27 22:44:46 +02:00

4 / 4

2

ElasticSearchIndex.UpdateSong has no regression test — an Elastic-only reintroduction of the #701 mutation stays CI-green priority: medium

#824

by timothy was closed 2026-08-29 21:55:58 +02:00

3 / 3

2

Scheduling collection-valued columns: is a runtime null reachable on DaysOfMonth / MonthsOfYear / DaysOfWeek? priority: medium

#823

by timothy was closed 2026-08-29 21:55:58 +02:00

6 / 6

3

test_the_suite_does_not_write_to_the_PRODUCTION_log uses global mutable state as its oracle — any concurrent session reddens it priority: medium

#822

by timothy was closed 2026-08-29 04:32:28 +02:00

4 / 4

2