Issues

• release:prepare does not update package-lock.json, leaving it stale at the previous version

  stratum-eng/stratum#338 · Filter by author jlamoreaux opened on Aug 30, 2026

• Bind API tokens to a project or org (the second scope dimension of #254)

  enhancement
  stratum-eng/stratum#323 · Filter by author jlamoreaux opened on Aug 28, 2026

• Design audit follow-ups — August 2026

  design-audit
  stratum-eng/stratum#311 · Filter by author jlamoreaux opened on Aug 27, 2026
  2

• Polish sweep from design audit (copy, favicon, nav chrome)

  design-auditenhancement
  stratum-eng/stratum#310 · Filter by author jlamoreaux opened on Aug 27, 2026
  1

• Affordance fixes: non-link commit SHAs, API key you can rotate but never see

  design-auditenhancement
  stratum-eng/stratum#309 · Filter by author jlamoreaux opened on Aug 27, 2026
  1

• Webhooks: replace comma-separated events field, surface signing secret

  design-auditenhancement
  stratum-eng/stratum#308 · Filter by author jlamoreaux opened on Aug 27, 2026
  1

• Evaluate a remote-and-commit tag-listing cache with explicit invalidation

  stratum-eng/stratum#286 · Filter by author coderabbitai opened on Aug 26, 2026
  

• Add tagged-fixture contract and isomorphic-git tag-fetch smoke coverage

  stratum-eng/stratum#285 · Filter by author coderabbitai opened on Aug 26, 2026
  

• Document how to run a webhook-evaluator executor safely (untrusted code execution)

  stratum-eng/stratum#281 · Filter by author jlamoreaux opened on Aug 25, 2026

• Sha-keyed staged trees in R2 have no reclamation path

  stratum-eng/stratum#262 · Filter by author jlamoreaux opened on Aug 24, 2026

• No compliance or data-residency documentation (SOC 2 path, DPA, subprocessors)

  documentationenhancement
  stratum-eng/stratum#259 · Filter by author jlamoreaux opened on Aug 23, 2026

• No git submodule support

  enhancement
  stratum-eng/stratum#258 · Filter by author jlamoreaux opened on Aug 23, 2026

• Telemetry is on by default — make PostHog opt-in (or first-run prompt)

  enhancement
  stratum-eng/stratum#257 · Filter by author jlamoreaux opened on Aug 23, 2026
  1

• No 2FA or IP allowlists on user accounts

  enhancement
  stratum-eng/stratum#256 · Filter by author jlamoreaux opened on Aug 23, 2026

• Audit log hardening: org scoping, coverage, export, immutability

  enhancement
  stratum-eng/stratum#255 · Filter by author jlamoreaux opened on Aug 23, 2026

• API tokens are unscoped and non-expiring (one per user)

  enhancement
  stratum-eng/stratum#254 · Filter by author jlamoreaux opened on Aug 23, 2026

• No SSO (SAML/OIDC) or SCIM provisioning

  enhancement
  stratum-eng/stratum#253 · Filter by author jlamoreaux opened on Aug 23, 2026

• Backup skips a repository whose only refs are tags (unborn HEAD), losing tag-reachable objects

  backup
  stratum-eng/stratum#251 · Filter by author jlamoreaux opened on Aug 22, 2026