Issues

• bug(hooks): secret-read-guard allows gh api -F body=@.env and httpie's data=@.env / file@.env, which read the file

  needs-triagepossible-duplicate
  open-gsd/gsd-core#5825 · Filter by author 0xdhx opened on Oct 31, 2026
  1

• bug(roadmap): get-phase and init phase_name keep the "(INSERTED)" heading marker every other reader strips, so begin-phase writes it into STATE.md current_phase_name

  needs-triage
  open-gsd/gsd-core#5824 · Filter by author 0xdhx opened on Oct 31, 2026

• enh(planning-inspect): plan rows carry no halted field, and progress.completed_plans counts a halted plan as completed

  needs-triage
  open-gsd/gsd-core#5823 · Filter by author 0xdhx opened on Oct 31, 2026

• bug(execute-phase): the post-merge build & test gate re-runs the full suite on an unmerged, already-tested HEAD in serial mode (use_worktrees: false)

  needs-triage
  open-gsd/gsd-core#5822 · Filter by author allcounter opened on Oct 31, 2026

• bug(hooks): git-cmd.js misses git --no-advice, --config-env and --attr-source before a subcommand

  needs-triage
  open-gsd/gsd-core#5821 · Filter by author davdittrich opened on Oct 31, 2026

• bug(tdd-red-evidence): a real node:test RED from assert.throws/assert.rejects with a RegExp is refused as invalid_record (repeated error/stack keys in the TAP diagnostic block)

  needs-triage
  open-gsd/gsd-core#5819 · Filter by author hardchor opened on Oct 30, 2026

• hasScopedFiles in commit-files-pathspec guard ignores --files-removed: deletion-only commit calls flagged unscoped

  needs-triage
  open-gsd/gsd-core#5817 · Filter by author davdittrich opened on Oct 30, 2026

• chore(#4941): ADR — residue-removal guard standard for worktree.reap-orphans

  needs-triage
  open-gsd/gsd-core#5812 · Filter by author behruznassre opened on Oct 30, 2026

• enhancement(execute-phase): Hermes can isolate delegated children in worktrees, but GSD negotiates dispatch isolation none for it, so every wave runs sequentially

  needs-triage
  open-gsd/gsd-core#5811 · Filter by author Bit0ps opened on Oct 29, 2026
  1

• chore(ci): make the Windows conformance shard packer account for long single test files

  approved-enhancement
  open-gsd/gsd-core#5807 · Filter by author tarc opened on Oct 29, 2026
  1

• bug(code-review): the disposition ledger loses recorded decisions on re-review — a reused finding id drops the earlier row, and a prefixed row is deleted with no console line

  bugconfirmed-bug
  open-gsd/gsd-core#5802 · Filter by author 0xdhx opened on Oct 29, 2026
  1

• enhance(map-codebase): per-repo codebase maps for planning.sub_repos workspaces

  approved-enhancement
  open-gsd/gsd-core#5801 · Filter by author steinybot opened on Oct 29, 2026
  1

• bug: Mac CI test fixtures depend on temp path aliases and installed OpenCode version

  bugconfirmed-bug
  open-gsd/gsd-core#5798 · Filter by author denniyahh opened on Oct 28, 2026
  1

• bug(emitted-attribution): on PR lanes the gate measures from a stale pull_request.base.sha while HEAD is GitHub's newer merge ref, sweeping next's ack trailers into the PR

  bugconfirmed-bug
  open-gsd/gsd-core#5797 · Filter by author davesienkowski opened on Oct 28, 2026
  1

• bug(plugin-update): claude plugin update from 1.18→1.19 leaves bin/lib/*.cjs unbuilt — every GSD command fails

  bugconfirmed-bug
  open-gsd/gsd-core#5796 · Filter by author briansumma opened on Oct 28, 2026
  2

• chore(workflows): four workflows call init.phase-op twice to read phase_number already in the first payload

  approved-enhancement
  open-gsd/gsd-core#5794 · Filter by author davdittrich opened on Oct 28, 2026
  1

• chore(docs-gates): gen-health-docs footnote hard-codes "31 rules", RULES has 34

  approved-enhancement
  open-gsd/gsd-core#5791 · Filter by author davdittrich opened on Oct 28, 2026
  1

• bug(runtime-conversion): extractFrontmatterField reads only the first item of a block-list tools:, so Copilot/Codex lose the declared agent allowlist

  bugconfirmed-bug
  open-gsd/gsd-core#5790 · Filter by author davdittrich opened on Oct 28, 2026
  1

• bug(phase-locator): a FIFO <plan>-SUMMARY.md hangs isSummaryFileHalted (unbounded readFileSync)

  bugconfirmed-bug
  open-gsd/gsd-core#5789 · Filter by author davdittrich opened on Oct 28, 2026
  1

• bug(state): state begin-phase --plans 0 writes Plan: 1 of ? instead of Plan: 1 of 0 (|| on planCount)

  bugconfirmed-bug
  open-gsd/gsd-core#5787 · Filter by author davdittrich opened on Oct 28, 2026
  1

• bug(init): init execute-phase --validate skips the plan-count warning when STATE.md records the count only on the Plan: line

  bugconfirmed-bug
  open-gsd/gsd-core#5786 · Filter by author davdittrich opened on Oct 28, 2026
  1

• chore(commands): cmdCommit is a 797-line function with ESLint complexity 77

  approved-enhancement
  open-gsd/gsd-core#5785 · Filter by author davdittrich opened on Oct 28, 2026
  1

• enhance(hooks): let a host make gsd-secret-read-guard deny on its own crash and stdin stall — today onFailure: "block" cannot fail it closed

  approved-enhancement
  open-gsd/gsd-core#5784 · Filter by author 0xdhx opened on Oct 28, 2026
  1

• chore(tests): harden tests/pr-template-links.test.cjs against line anchors, bare repo pages and footnote definitions

  approved-enhancement
  open-gsd/gsd-core#5780 · Filter by author davdittrich opened on Oct 28, 2026
  1

• bug(hooks): secret-read-guard allows curl -d@.env, curl -F file=@.env and --data-urlencode k@.env, while it denies curl -d @.env

  bugconfirmed-bug
  open-gsd/gsd-core#5779 · Filter by author 0xdhx opened on Oct 28, 2026
  1