Issues

• Complete Go 1.27.2 upgrade after official gosec compatibility fix

  area/ci
  the-sarge/cpace#320 · Filter by author the-sarge opened on Oct 15, 2026

• Nested tools/* modules: run golangci-lint per module instead of the standalone staticcheck lane

  the-sarge/cpace#280 · Filter by author the-sarge opened on Aug 21, 2026

• Fix the no-library-output ast-grep rule so it actually matches

  area/cikind/hardening
  the-sarge/cpace#250 · Filter by author the-sarge opened on Aug 11, 2026
  1

• Harden GitHub release-control recapture failure detection

  area/cikind/hardening
  the-sarge/cpace#245 · Filter by author the-sarge opened on Aug 1, 2026

• Investigate complementary security testing and Rapid suitability

  kind/coveragesecurity
  the-sarge/cpace#228 · Filter by author the-sarge opened on Jul 30, 2026
  1

• Framing and sampling hardening nits from pre-outreach dry-run review

  kind/hardening
  the-sarge/cpace#217 · Filter by author the-sarge opened on Jul 2, 2026

• Integrator-guidance additions from pre-outreach dry-run review

  documentation
  the-sarge/cpace#216 · Filter by author the-sarge opened on Jul 2, 2026

• Harden exchange fixture review nits

  external reviewkind/hardening
  the-sarge/cpace#211 · Filter by author the-sarge opened on Jul 2, 2026

• Harden fuzz-target registry drift test fidelity

  area/ciexternal reviewkind/hardening
  the-sarge/cpace#208 · Filter by author the-sarge opened on Jul 2, 2026

• Harden summary-doc manifest adapter edge cases

  area/cikind/hardening
  the-sarge/cpace#112 · Filter by author the-sarge opened on Jun 14, 2026

• Internal hygiene: make identityEncoding a fixed-size array to remove mutable package-level state

  kind/hardening
  the-sarge/cpace#79 · Filter by author the-sarge opened on Jun 11, 2026

• CI: expand cross-platform smoke matrix (run tests; add 32-bit and big-endian coverage)

  area/cikind/coveragepriority/medium
  the-sarge/cpace#64 · Filter by author the-sarge opened on Jun 9, 2026 · Production Readiness

• CI: assert dependency licenses at release time

  area/cikind/hardeningpriority/medium
  the-sarge/cpace#63 · Filter by author the-sarge opened on Jun 9, 2026 · Production Readiness

• CI: upload Scorecard SARIF to Code Scanning

  area/cikind/hardeningpriority/high
  the-sarge/cpace#62 · Filter by author the-sarge opened on Jun 9, 2026 · Production Readiness

• Decoder: add aggregate message size cap in newMessageReader

  area/framingkind/hardeningpriority/medium
  the-sarge/cpace#61 · Filter by author the-sarge opened on Jun 9, 2026 · Production Readiness

• Decoder: reject empty sid field when local AllowEmptySessionID is false

  area/framingkind/hardeningpriority/medium
  the-sarge/cpace#60 · Filter by author the-sarge opened on Jun 9, 2026 · Production Readiness

• External review: binary wire framing and field-size limits

  external review
  the-sarge/cpace#31 · Filter by author the-sarge opened on May 7, 2026 · External Review

• Release blocker: independent cryptographic review

  release blockersecurity
  the-sarge/cpace#32 · Filter by author the-sarge opened on May 7, 2026 · Production Readiness

• External review: scalar sampling, confirmation, exporter, and session lifecycle

  external review
  the-sarge/cpace#30 · Filter by author the-sarge opened on May 7, 2026 · External Review

• External review: context-info construction and identity orientation

  external review
  the-sarge/cpace#29 · Filter by author the-sarge opened on May 7, 2026 · External Review