Issues

• Sprint 2026-W43: SSH live authorization, OSS half B — a deactivated user's live sessions end, a user rotates their key without lockout, and managed backends ask the cloud

  epichelp wantedsecuritysprint
  FootprintAI/Containarium#2528 · Filter by author hsinatfootprintai opened on Oct 13, 2026
  2

• ssh-authz: AuthorizedKeysCommand on the LXC jump host for boxes reachable without the sentinel

  needs-verificationphase-2-optimizesecuritysize:M
  FootprintAI/Containarium#2527 · Filter by author hsinatfootprintai opened on Oct 13, 2026
  1

• ssh-authz: device-approval path in the sentinel plugin (poll until approved, cap 60 s, keyboard-interactive or banner-only per the spike)

  help wantedneeds-verificationphase-2-optimizesecuritysize:M
  FootprintAI/Containarium#2526 · Filter by author hsinatfootprintai opened on Oct 13, 2026

• ssh-authz: daemon managed-mode forwarder to ActuationService.AuthorizeSSH

  help wantedneeds-verificationphase-1-flowsecuritysize:S
  FootprintAI/Containarium#2525 · Filter by author hsinatfootprintai opened on Oct 13, 2026
  1

• ssh-authz: spike — does sshpiperd v1.6.1 allow publickey partial-success into keyboard-interactive from a plugin?

  help wantedphase-1-flowsecuritysize:Stest
  FootprintAI/Containarium#2524 · Filter by author hsinatfootprintai opened on Oct 13, 2026
  2

• ssh-authz: containarium ssh rotate with proof of possession, overlap window, and the expiry nudge on login

  help wantedneeds-verificationphase-1-flowsecuritysize:M
  FootprintAI/Containarium#2523 · Filter by author hsinatfootprintai opened on Oct 13, 2026
  6

• ssh-authz: TerminateUserSessions RPC, containarium sessions terminate, MCP tool, and the assignment handler

  help wantedneeds-verificationphase-1-flowsecuritysize:M
  FootprintAI/Containarium#2522 · Filter by author hsinatfootprintai opened on Oct 13, 2026
  1

• Sprint 2026-W42: SSH live authorization, OSS half A — every raw-key login is checked against the daemon's identity record, and a revoked key is refused at the sentinel

  epichelp wantedsecuritysprint
  FootprintAI/Containarium#2521 · Filter by author hsinatfootprintai opened on Oct 13, 2026
  3

• ssh-authz: --ssh-authz-enforce flag and the end-to-end slice proving a revoked key is denied

  needs-verificationphase-1-flowsecuritysize:M
  FootprintAI/Containarium#2520 · Filter by author hsinatfootprintai opened on Oct 13, 2026
  1

• ssh-authz: carry the DENIED phase and authorization fields through SSH session ingest into the audit store

  help wantedphase-1-flowsecuritysize:S
  FootprintAI/Containarium#2519 · Filter by author hsinatfootprintai opened on Oct 13, 2026
  1

• ssh-authz: sentinel ssh-authz-plugin in audit-only mode with positive cache and fail-closed grace window

  help wantedmodel:fableneeds-verificationphase-1-flowsecuritysize:L
  FootprintAI/Containarium#2518 · Filter by author hsinatfootprintai opened on Oct 13, 2026
  2

• ssh-authz: daemon decider in self-host mode, ssh_keys registry with backfill, sk-key ParseType

  help wantedmodel:opusneeds-verificationphase-1-flowsecuritysize:L
  FootprintAI/Containarium#2517 · Filter by author hsinatfootprintai opened on Oct 13, 2026
  2

• security: SSH access survives offboarding — registered keys never expire and nothing checks identity at login (design in #2514)

  productsecurity
  FootprintAI/Containarium#2515 · Filter by author hsinatfootprintai opened on Oct 13, 2026
  5

• A dispatched run that edits files but returns no final JSON is marked failed, and nothing records why

  bug
  FootprintAI/Containarium#2513 · Filter by author hsinatfootprintai opened on Oct 13, 2026

• Dispatched run's agent never learns where its checkout is: workspace.json is written but nothing reads it

  bug
  FootprintAI/Containarium#2512 · Filter by author hsinatfootprintai opened on Oct 13, 2026

• Box → daemon traffic (model gateway, platform MCP, A2A) is plaintext http on the bridge; serve it over TLS and drop the MCP plaintext opt-in

  enhancement
  FootprintAI/Containarium#2510 · Filter by author hsinatfootprintai opened on Oct 13, 2026

• Security scan reports "clean" when clamdscan errors out (exit 2): partial scans are recorded as clean and feed auto-quarantine release

  bugsecurity
  FootprintAI/Containarium#2496 · Filter by author hsinatfootprintai opened on Oct 12, 2026

• HOL Guard rule for delete_file?

  FootprintAI/Containarium#2491 · Filter by author internet-dot opened on Oct 12, 2026

• sentinel: --metrics-export is off on the live sentinel and omits primary_preferred — fallback/backend-down states page nobody

  bug
  FootprintAI/Containarium#2484 · Filter by author hsinatfootprintai opened on Oct 12, 2026

• Guardrail/egress policy stores: document the fail-closed startup behaviour and retry after Postgres recovers

  enhancementmodel:opusruntime:claudesize:M
  FootprintAI/Containarium#2483 · Filter by author hsinatfootprintai opened on Oct 11, 2026

• buf lint fails on the repo's own buf.yaml and is not run in CI

  bugmodel:sonnetruntime:claudesize:S
  FootprintAI/Containarium#2481 · Filter by author hsinatfootprintai opened on Oct 11, 2026

• Flaky required check: TestSpawn_SurvivesParentExit (internal/agentbox)

  bugmodel:sonnetruntime:claudesize:S
  FootprintAI/Containarium#2479 · Filter by author hsinatfootprintai opened on Oct 11, 2026

• release gate: a tunnel-client change shipped without the matching sentinel change; nothing runs a tagged client against a tagged sentinel

  ci
  FootprintAI/Containarium#2469 · Filter by author hsinatfootprintai opened on Oct 11, 2026

• Portfolio: FootprintAI

  FootprintAI/Containarium#2429 · Filter by author hsinatfootprintai opened on Oct 9, 2026
  1

• pentest: add OpenVAS (Greenbone) scanner module and make daily scanning the default

  FootprintAI/Containarium#2426 · Filter by author hsinatfootprintai opened on Oct 9, 2026
  2