Issues

• windows-distribution-t-bounded-helper-tree: output_within's timeout does not bound on Windows

  area:desktopplatform:windowssev:lowtrack:desktop-distributiontype:finding
  chris-dare-dev/arXMCP#498 · Filter by author chris-dare-dev opened on Aug 24, 2026
  3

• chaos-followup: window-ownership test silently requires an unlocked session

  agent-readyarea:desktopplatform:macossev:lowtrack:desktop-distributiontype:finding
  chris-dare-dev/arXMCP#493 · Filter by author chris-dare-dev opened on Aug 23, 2026
  1

• chaos-followup: no way to cancel a slow start

  agent-readyarea:desktopplatform:macossev:lowtrack:desktop-distributiontype:finding
  chris-dare-dev/arXMCP#492 · Filter by author chris-dare-dev opened on Aug 23, 2026

• chaos-followup: style-src 'unsafe-inline' is retained on a stale rationale

  agent-readyarea:securityarea:uisev:lowtype:finding
  chris-dare-dev/arXMCP#491 · Filter by author chris-dare-dev opened on Aug 23, 2026

• chaos-sup-19: await_bound leaks its blocked reader thread on every timeout path

  agent-readyarea:desktopplatform:macossev:lowtrack:desktop-distributiontype:finding
  chris-dare-dev/arXMCP#490 · Filter by author chris-dare-dev opened on Aug 23, 2026
  1

• chaos-fe-16: No hx-push-url anywhere: htmx swaps never change the URL

  agent-readyarea:uisev:lowtype:finding
  chris-dare-dev/arXMCP#482 · Filter by author chris-dare-dev opened on Aug 23, 2026
  1

• chaos-api-06: MCP initialize accepts garbage/wrong-type protocolVersion (int 12345, '9999-99-99') with HTTP 200

  agent-readyarea:mcp-surfacesev:lowtype:finding
  chris-dare-dev/arXMCP#473 · Filter by author chris-dare-dev opened on Aug 23, 2026
  1

• chaos-api-05: MCP validation/error responses leak internal pydantic + handler class names

  agent-readyarea:mcp-surfacearea:securitysev:lowtype:finding
  chris-dare-dev/arXMCP#472 · Filter by author chris-dare-dev opened on Aug 23, 2026
  1

• chaos-api-01: No HTTP auth on any route in standalone/make-up/Docker boot; startup token gates only GET /readyz and only under desktop-child

  agent-readyarea:mcp-surfacearea:securitysev:mediumtype:finding
  chris-dare-dev/arXMCP#446 · Filter by author chris-dare-dev opened on Aug 22, 2026

• chaos-2026-08-22: adversarial chaos run against the macOS desktop app (100 findings)

  area:desktopepicplatform:macostrack:desktop-distributiontype:finding
  chris-dare-dev/arXMCP#424 · Filter by author chris-dare-dev opened on Aug 22, 2026
  3

• windows-distribution-t-lifecycle-soak: Run the thirty-cycle cleanup soak

  area:desktopplatform:windowstrack:desktop-distributiontype:task
  chris-dare-dev/arXMCP#422 · Filter by author chris-dare-dev opened on Aug 8, 2026 · arXMCP for Windows — trusted native distribution

• windows-distribution-t-redacted-diagnostics: Expose redacted Windows lifecycle diagnostics

  area:desktopplatform:windowstrack:desktop-distributiontype:task
  chris-dare-dev/arXMCP#421 · Filter by author chris-dare-dev opened on Aug 8, 2026 · arXMCP for Windows — trusted native distribution

• windows-distribution-t-lifecycle-failure-matrix: Exercise the Windows lifecycle failure matrix

  area:desktopplatform:windowstrack:desktop-distributiontype:task
  chris-dare-dev/arXMCP#420 · Filter by author chris-dare-dev opened on Aug 8, 2026 · arXMCP for Windows — trusted native distribution

• windows-distribution-t-job-object-adapter: Own the server tree with a Windows Job Object

  area:desktopplatform:windowstrack:desktop-distributiontype:task
  chris-dare-dev/arXMCP#419 · Filter by author chris-dare-dev opened on Aug 8, 2026 · arXMCP for Windows — trusted native distribution
  1

• windows-distribution-t-portability-ledger: Publish the portability gaps and dependency record

  area:desktopplatform:windowstrack:desktop-distributiontype:task
  chris-dare-dev/arXMCP#418 · Filter by author chris-dare-dev opened on Aug 8, 2026 · arXMCP for Windows — trusted native distribution

• windows-distribution-t-support-floor: Record the tested Windows support floor

  area:desktopplatform:windowstrack:desktop-distributiontype:task
  chris-dare-dev/arXMCP#417 · Filter by author chris-dare-dev opened on Aug 8, 2026 · arXMCP for Windows — trusted native distribution

• windows-distribution-t-clean-host-runtime: Automate the clean-host frozen-runtime proof

  area:desktopplatform:windowstrack:desktop-distributiontype:task
  chris-dare-dev/arXMCP#416 · Filter by author chris-dare-dev opened on Aug 8, 2026 · arXMCP for Windows — trusted native distribution
  1

• windows-distribution-t-contract-conformance: Run the shared contract fixtures on Windows

  area:desktopplatform:windowstrack:desktop-distributiontype:task
  chris-dare-dev/arXMCP#415 · Filter by author chris-dare-dev opened on Aug 8, 2026 · arXMCP for Windows — trusted native distribution

• windows-distribution-spike-5: Choose the Windows installer and update strategy

  area:desktopplatform:windowstrack:desktop-distributiontype:spike
  chris-dare-dev/arXMCP#414 · Filter by author chris-dare-dev opened on Aug 8, 2026 · arXMCP for Windows — trusted native distribution

• windows-distribution-spike-3: Choose an attainable Windows signing route

  area:desktopplatform:windowstrack:desktop-distributiontype:spike
  chris-dare-dev/arXMCP#412 · Filter by author chris-dare-dev opened on Aug 8, 2026 · arXMCP for Windows — trusted native distribution

• windows-distribution-m5: Supported Windows beta boundary published

  area:desktopplatform:windowstrack:desktop-distributiontype:milestonetype:task
  chris-dare-dev/arXMCP#409 · Filter by author chris-dare-dev opened on Aug 8, 2026 · arXMCP for Windows — trusted native distribution

• windows-distribution-m4: Windows servicing preserves operator data

  area:desktopplatform:windowstrack:desktop-distributiontype:milestonetype:task
  chris-dare-dev/arXMCP#408 · Filter by author chris-dare-dev opened on Aug 8, 2026 · arXMCP for Windows — trusted native distribution

• windows-distribution-m3: Signed Windows application installs on clean hosts

  area:desktopplatform:windowstrack:desktop-distributiontype:milestonetype:task
  chris-dare-dev/arXMCP#407 · Filter by author chris-dare-dev opened on Aug 8, 2026 · arXMCP for Windows — trusted native distribution

• windows-distribution-m2: Every Windows exit closes the full process tree

  area:desktopplatform:windowstrack:desktop-distributiontype:milestonetype:task
  chris-dare-dev/arXMCP#406 · Filter by author chris-dare-dev opened on Aug 8, 2026 · arXMCP for Windows — trusted native distribution

• windows-distribution-m1: Windows portability and support floor proved

  area:desktopplatform:windowstrack:desktop-distributiontype:milestonetype:task
  chris-dare-dev/arXMCP#405 · Filter by author chris-dare-dev opened on Aug 8, 2026 · arXMCP for Windows — trusted native distribution
  1