Activity
What moved recently.
The 250 most recently changed tasks, documents and decisions across every published tracker - the latest today. Dates come from each record's own front matter, not from when this page was built.
18
backlog-publishing · BAP-0008Stop the edge injecting a WebMCP bridge into every pagebacklog-publishing · BAP-0005Make the site legible to agentsbacklog-publishing · BAP-0006Filter and sort search resultsbacklog-publishing · BAP-0007Give every page a link preview imagebacklog-publishing · BAP-0009Publish the .github tracker under a URL the edge will servebacklog-publishing · BAP-0002Reach every published doc and decision from the sitebacklog-publishing · BAP-0003Surface the record metadata the ingest already carriesbacklog-publishing · BAP-0004Add fleet-wide views across every trackeropnsense2otel · OPN-0108Update both testbed firewalls to their channel head on every canary sessionopnsense2otel · OPN-0109Raise and lower the oli testbed from CI over forced-command SSHbacklog-publishing · BAP-0001Announce changed pages with IndexNow and join the fleet sitemap indexopnsense2otel · OPN-0112Comment on the canary issues only when the findings changeopnsense2otel · OPN-0111Narrow the support policy to the current stable OPNsense releaseopnsense2otel · OPN-0113Decide per endpoint whether to prune the pre-26.7 legacy payload shimsopnsense2otel · OPN-0107Stamp the OPNsense generation on both testbed canary reportsopnsense2otel · OPN-0106Retire the production-firewall schema canaryopnsense2otel · doc-0002Wave operating modelopnsense2otel · OPN-0110Consolidate the testbed to three guests and run the canary profiles sequentially
2
18
grafana-cloud-vending-machine · GCV-0074The vended Git Sync connection cannot be created on Grafana Cloudgrafana-cloud-vending-machine · GCV-0075Vended rotating tokens can never rotate, so every stack loses its credentials at the first rotation windowgrafana-cloud-vending-machine · GCV-0069Let the alerting and oncall APIs express an IRM Slack destination end to endgrafana-cloud-vending-machine · GCV-0087Make a stuck rotating token visible from composite conditions alonegrafana-cloud-vending-machine · GCV-0088State what Crossplane emits natively for vended resource health and expose it without custom instrumentationgrafana-cloud-vending-machine · GCV-0073Define ordered decommission for Git Sync credentialsgrafana-cloud-vending-machine · GCV-0078Migrate the pre-organization estate onto the current request schema and move its output identity with itgrafana-cloud-vending-machine · GCV-0085Ship a real stack consumer profile so a consumer cluster can mint scoped telemetry credentialsgrafana-cloud-vending-machine · GCV-0086Close the real-identifier leak class the tracker reproduced three timesgrafana-cloud-vending-machine · doc-0002Wave operating modelgrafana-cloud-vending-machine · GCV-0076A plugin request pinned to the newest version never converges, because the provider treats version as replace-onlygrafana-cloud-vending-machine · GCV-0077Composed resources churn hard enough to hold the composite watch circuit breaker open on every stackgrafana-cloud-vending-machine · GCV-0081GrafanaProvisioningRepository can only express the secure-value shape the vendor refuses, so setting any repository secret 403s forevergrafana-cloud-vending-machine · GCV-0082Make the refused-vendor-shape class unrepeatable, instead of fixed one kind at a timegrafana-cloud-vending-machine · GCV-0083Audit and improve public documentation and architecturegrafana-cloud-vending-machine · GCV-0084Re-enable repository secure values once the vendor fixes the reference-form refusalgrafana-cloud-vending-machine · GCV-0079Provision datasources, a folder and Git Sync into a stack the platform does not own, driven by an external project CRgrafana-cloud-vending-machine · GCV-0080Vend a whole Grafana Cloud stack in response to an external project CR appearing
23
rfc6035-2otel · doc-0001Agent fan-out protocol (canonical)sagemcom-f3896-py · doc-0001Agent fan-out protocol (canonical)sf2loki · doc-0001Agent fan-out protocol (canonical)synthkit · doc-0001Agent fan-out protocol (canonical)tailscale2otel · doc-0001Agent fan-out protocol (canonical)transceiver-exporter · doc-0001Agent fan-out protocol (canonical)meraki-dashboard-exporter · doc-0001Agent fan-out protocol (canonical)meraki-dashboard-ha · doc-0001Agent fan-out protocol (canonical)openbao-plugin-secrets-github · doc-0001Agent fan-out protocol (canonical)opnsense2otel · doc-0001Agent fan-out protocol (canonical)paperless-ngx-dedupe · doc-0001Agent fan-out protocol (canonical)polylens2otel · doc-0001Agent fan-out protocol (canonical)fleet-management-operator · doc-0001Agent fan-out protocol (canonical)genai-otel-bridge · doc-0001Agent fan-out protocol (canonical)grafana-cloud-org-insights · doc-0001Agent fan-out protocol (canonical)grafana-cloud-vending-machine · doc-0001Agent fan-out protocol (canonical)graph2otel · doc-0001Agent fan-out protocol (canonical)grotTrack · doc-0001Agent fan-out protocol (canonical)intune-assignments-manager · doc-0001Agent fan-out protocol (canonical)autopi-ha · doc-0001Agent fan-out protocol (canonical)bumblebee-catalog · doc-0001Agent fan-out protocol (canonical)bumblebee-intune · doc-0001Agent fan-out protocol (canonical)codexlb2otel · doc-0001Agent fan-out protocol (canonical)
1
15
codexlb2otel · CXO-0046Accept the refreshed drift baseline once the new wire shapes are consumedgrafana-cloud-vending-machine · GCV-0072Quote optional test filters containing shell metacharacterscodexlb2otel · doc-0002Wave operating modelgrafana-cloud-vending-machine · GCV-0068A newly vended stack's claim stays Ready=False forever, because its per-stack ProviderConfig is never usedgrafana-cloud-vending-machine · GCV-0070Vend the Git Sync connection so a repository credential never enters a claimgrafana-cloud-vending-machine · GCV-0071Complete the Git Sync repository surface the vending API pins to one shapecodexlb2otel · CXO-0048Clear the three blocked Renovate major bumps: bubbletea v2, lipgloss v2, backoff v7codexlb2otel · CXO-0044Per-account quota and key-eligibility gauges from Postgres, covering accounts that serve no trafficcodexlb2otel · CXO-0047Bound the account poller quota queries: both statements scan the whole relation every two minutescodexlb2otel · CXO-0040Fix archive error-event decoding: the wrong key, the dead field, and the always-empty upstream statuscodexlb2otel · CXO-0041Capture the quota snapshot the 429 error event carries, and emit limit_reachedcodexlb2otel · CXO-0042Adopt the remaining September wire additions: routing hint, passthrough metadata, models etag, compaction blockcodexlb2otel · CXO-0043Widen Postgres enrichment to the populated request_logs columns it ignorescodexlb2otel · CXO-0045Panels, naming checks and documentation for every metric this wave addsmeraki-dashboard-exporter · MDE-0068Expose client IP on meraki_client_info and evict superseded info series
23
synthkit · SKT-0074Repair stale lab acceptance predicates after producer projectionsynthkit · SKT-0077Emit the non-network Datadog standalone-host breadth from the committed verdictsynthkit · SKT-0078Ground or reject the 75 system.net standalone-host candidatessynthkit · SKT-0079Add a selectable OTel-receiver pod-log resource shape and declare otel-receivers modelledsynthkit · SKT-0080Convert the producer-coverage ratchet into a claimed ledgersynthkit · SKT-0071Settle the two remaining Azure managed Service Bus error producer pairssynthkit · SKT-0075Cover the final minute in runner incident test windowssynthkit · SKT-0076Model OTLP pod logs and right-size producer coverage after live receiver proofgrafana-cloud-org-insights · GCI-0025Verify what traces:read and profiles:read actually permit, with an isolated mint-and-delete probegrafana-cloud-org-insights · GCI-0026Validate the Loki retention surface against an authorised development deploymentgrafana-cloud-org-insights · GCI-0010Firehose log subscription cannot be created by a new deployment - trust policy demands a SourceArn CloudWatch Logs never sendsgrafana-cloud-org-insights · GCI-0018.01Publish unbounded-cardinality label names as a risk finding, over the payload the collector already holdsgrafana-cloud-org-insights · GCI-0024Unblock container publishing - Trivy fails the gate on base-image CVEs that have no upstream fixgrafana-cloud-org-insights · GCI-0027Add a fleet-wide opt-in for unfixed Trivy findings in the reusable container publishergrafana-cloud-org-insights · GCI-0018Detect PII and unbounded-cardinality label patterns as a risk findinggrafana-cloud-org-insights · GCI-0006Prove hosted CI at an exact source revisiongrafana-cloud-org-insights · GCI-0007Retire transitional repository state documentationgrafana-cloud-org-insights · GCI-0014Collect Adaptive Metrics recommendation config as a view, not a metricgrafana-cloud-org-insights · GCI-0022Surface Loki retention overrides and per-stream retention as an operational findinggrafana-cloud-org-insights · GCI-0023State what each declared reader scope actually permits, not only the routes this collector callsgrafana-cloud-org-insights · doc-0002Product ownership, source hierarchy, and standing decisionsgrafana-cloud-org-insights · GCI-0020Publish Adaptive Traces enablement and sampling savingssynthkit · SKT-0070Close standalone Docker machine identity gaps from the independent cAdvisor capture
5
tailscale2otel · TSO-0148Decouple ingress WAL completion from metric collection to preserve configured DPMtailscale2otel · TSO-0149Build local WAL throughput and configuration comparison harnesstailscale2otel · TSO-0147Resolve recurring readiness failures and ingress WAL drain backlogsynthkit · SKT-0072Replace frozen Datadog receiver system values with grounded deterministic mechanicssynthkit · SKT-0073Classify every standalone Datadog host capture family before further implementation
28
grafana-cloud-vending-machine · GCV-0064Review the wave 9 corrections that landed after the CodeRabbit two-pass ceilinggrafana-cloud-vending-machine · GCV-0065Give the local gate a way to provision the pinned envtest assetsgrafana-cloud-vending-machine · GCV-0066Give the migration handoff the credential rotation procedure it currently only warns aboutgrafana-cloud-vending-machine · GCV-0067Record live behavioural proof as permanently out of scope, not as outstanding workgrafana-cloud-vending-machine · GCV-0061Let a second cluster mint credentials against, and adopt, a stack it did not vendsynthkit · SKT-0055Model the Datadog agent receiver path from independent post-gateway capturesgrafana-cloud-vending-machine · GCV-0063Close the family-derivation blind spot for non-direct renderer dispatchgrafana-cloud-vending-machine · GCV-0060Vend the asserts product surfacegrafana-cloud-vending-machine · GCV-0062Correct the shipped prose that still calls vended families separately ownedgrafana-cloud-vending-machine · GCV-0049Complete k6 vending with load tests and schedulesgrafana-cloud-vending-machine · GCV-0050Complete synthetic monitoring with private probes and check alertsgrafana-cloud-vending-machine · GCV-0054State the cluster prerequisites the admission-policy layer introducedgrafana-cloud-vending-machine · GCV-0055Close the k6 vending surface at the settled admission boundarygrafana-cloud-vending-machine · GCV-0056Close the synthetic monitoring surface and record the private-probe refusal as designgrafana-cloud-vending-machine · GCV-0057Close the documentation-drift class the stale function digest exposedgrafana-cloud-vending-machine · GCV-0058Cover the receiver-freshness paths wave 6 shipped with zero test coveragegrafana-cloud-vending-machine · GCV-0059Run the adversarial review pass the wave 6 two-pass ceiling deferredgrafana-cloud-vending-machine · decision-0002Refuse private Synthetic Monitoring probes until the provider exposes bounded token lifetimegrafana-cloud-vending-machine · decision-0001Keep cross-object usage enforcement at reconciliationgrafana-cloud-vending-machine · GCV-0042Reconcile held-candidate documentation after the admission gate landsgrafana-cloud-vending-machine · GCV-0044Vend the alerting notification routing treegrafana-cloud-vending-machine · GCV-0045Vend on-call schedules and shiftsgrafana-cloud-vending-machine · GCV-0046Vend on-call escalation chains, routes and integrationsgrafana-cloud-vending-machine · GCV-0047Vend cloud provider integrations and metrics scrape jobsgrafana-cloud-vending-machine · GCV-0048Vend Private Data source Connect networksgrafana-cloud-vending-machine · GCV-0051Vend in-stack service accounts under the token expiry ceilinggrafana-cloud-vending-machine · GCV-0052Vend Frontend Observability appsgrafana-cloud-vending-machine · GCV-0053Vend Grafana ML jobs, outlier detectors and holidays
46
grafana-cloud-vending-machine · GCV-0035Prove every fail-closed CEL rule actually rejects, against a real API servergrafana-cloud-vending-machine · GCV-0039Resolve the open SCIM user-lifecycle question and correct the recorded plan floorgrafana-cloud-vending-machine · GCV-0043Reconcile the function package after concurrent runtime dependency automationsynthkit · SKT-0068Close the six proven P3 producer and label envelope omissionssynthkit · SKT-0060Read dump metric names against documented signal formats with explicit unresolved evidencegrafana-cloud-vending-machine · GCV-0034Admit every XRD against a real API server so CEL rules are proven, not parsedgrafana-cloud-vending-machine · GCV-0040Reject structurally invalid XRD schemas in the gate, without an API servergrafana-cloud-vending-machine · GCV-0041Provision pinned envtest assets in hosted CI so the admission gate can run theregrafana-cloud-vending-machine · GCV-0036Close the hand-maintained registry drift class the catalog render gap exposedgrafana-cloud-vending-machine · GCV-0037Write the 0.x to 1.0 migration guide for the breaking API changesgrafana-cloud-vending-machine · GCV-0038Split the 75 KB README so it stops being a single-owner scheduling bottleneckgrafana-cloud-vending-machine · GCV-0028Decide the SCIM and Team Sync direction before the tenant count growssynthkit · SKT-0069Keep secret scanning active for captured Datadog attribute namessynthkit · SKT-0056Emit the captured OTel Collector with Prometheus exporters permutationgrafana-cloud-vending-machine · GCV-0013Enforce a token expiry ceiling in the composition functiongrafana-cloud-vending-machine · GCV-0014Allow a platform-controlled IP allow-list on vended access policiesgrafana-cloud-vending-machine · GCV-0019Vend a golden SLO per usage classgrafana-cloud-vending-machine · GCV-0021Vend a k6 project with limits and allowed load zones as a blast-radius capgrafana-cloud-vending-machine · GCV-0022Vend Synthetic Monitoring installation with a check budget, and verify it independentlygrafana-cloud-vending-machine · GCV-0024Model a multi-stack promotion ladder as a first-class APIgrafana-cloud-vending-machine · GCV-0025Add expiring sandbox stacks with a recorded extension trailgrafana-cloud-vending-machine · GCV-0026Make retention class a stack-request input, because export does not exist at decommissionsynthkit · SKT-0058k3d image import reports success while the nodes loaded nothingsynthkit · SKT-0059Scope signal identity by reviewed producer, and fail loud when no producer is comparablesynthkit · SKT-0067Make the parallel-isolation test wait for observed dropped ticksgrafana-cloud-vending-machine · GCV-0012Expose observability product activation on the stack requestgrafana-cloud-vending-machine · GCV-0017Add a datasource access API that aggregates LBAC rules per datasourcegrafana-cloud-vending-machine · GCV-0023Decide who owns dashboard content: provisioning repositories or Crossplanegrafana-cloud-vending-machine · GCV-0027Prohibit public dashboards by construction in vended custom rolesgrafana-cloud-vending-machine · GCV-0029Decide how to reach Adaptive Metrics, the largest cost lever with no Crossplane coveragegrafana-cloud-vending-machine · GCV-0033Onboard release-please so a breaking API change is recorded as a versiongrafana-cloud-vending-machine · GCV-0011Consider a domain API for Agent Observability evaluators and guardsgrafana-cloud-vending-machine · GCV-0015Add a Grafana Assistant governance APIgrafana-cloud-vending-machine · GCV-0016Add an observe-only stack inventory API for drift detection and adoptiongrafana-cloud-vending-machine · GCV-0018Add a per-stack alerting bundle with an explicit provenance decisiongrafana-cloud-vending-machine · GCV-0020Vend baseline Fleet Management pipelines as a telemetry hygiene controlgrafana-cloud-vending-machine · GCV-0032Vend into multiple Grafana Cloud organisationssynthkit · SKT-0054Resolve the control-plane PENDING rows from observed scheduler, controller-manager and etcd evidencesynthkit · SKT-0066Validate P3 job identity after corpus producer projectionsynthkit · SKT-0061Pass explicit Kubernetes contexts throughout the local capture matrixsynthkit · SKT-0064Label lab receiver receipt counts by their actual unitssynthkit · SKT-0020.04Rancher capture environment and its first corpus capturesynthkit · SKT-0053Merge the second AWS, Azure and GCP captures into the corpus by cumulative unionsynthkit · SKT-0062Preserve synthetic metric shapes per producer during corpus comparisonsynthkit · SKT-0063Correct captured Kubernetes control-plane histograms and scrape envelopessynthkit · SKT-0065Validate cumulative corpus coverage against reviewed routes instead of frozen snapshot counts
2
50
synthkit · SKT-0012.11Publish the skcapture image on release tags and verify it alongside the main imagesynthkit · SKT-0051Emit the captured agento11y_eval enqueue and judge-cost familiessynthkit · SKT-0052Two fixed-tick dump runs differ in logs and spans: find the unseeded drawsynthkit · SKT-0012Validate skcapture and skforge against the lab Kubernetes environmentssynthkit · SKT-0002sigil: re-capture a live heuristic evaluator to confirm its series shapeopnsense2otel · OPN-0104Retire the syslog debug-capture mount on camdentailscale2otel · TSO-0145Audit v5 documentation against shipped features and remove AI proseopnsense2otel · doc-0004Camden capture parser and pass-through review - OPN-0104synthkit · SKT-0020Multi-cloud capture environments: model synthkit against every major managed Kubernetessynthkit · SKT-0020.02AKS capture environment and its first corpus capturesynthkit · SKT-0020.03GKE capture environment and its first corpus capturesynthkit · SKT-0020.06Port the EKS capture environment into synthkit-terraformopnsense2otel · OPN-0102Skip the GeoIP startup fetch when the installed database is freshopnsense2otel · OPN-0103Console quiet mode when self-logs ship over OTLPtailscale2otel · TSO-0133Review the coordination alert firing history and decide paging, due 2026-09-11tailscale2otel · TSO-0144Route receiver and admin traffic by a leader pod label so standbys can be Readysynthkit · SKT-0007.09Capture and decide csp_azure and csp_gcp OTel-native formopnsense2otel · OPN-0057Measure UDP receiver throughput: same-harness before/after for buffers and worker poolopnsense2otel · OPN-0101Syslog UDP receiver refuses to start on FreeBSD when the requested receive buffer exceeds the kernel limitopnsense2otel · OPN-0097Bound config revision diff input before redaction to cap transient allocationopnsense2otel · OPN-0099Document and harness the Loki visibility delay for historical config revision eventscodexlb2otel · CXO-0039Instant barchart panels show the timestamp as the category and hide the series namecodexlb2otel · CXO-0037Tool-call span IDs collide when a call ID is reused within a threadcodexlb2otel · CXO-0034Explain why proxy queue and bridge-queue waits and upstream diagnostics never appeared live, and prove them over a real windowcodexlb2otel · CXO-0035Enrich turns with codex-lb's bounded client, connection-kind and failure-phase columnssynthkit · SKT-0007OTLP-native emission parity across the catalogsynthkit · SKT-0020.01Stand up the synthkit-terraform repository and freeze its module shapetailscale2otel · TSO-0033Design and ship an HA / multi-replica deployment storytailscale2otel · doc-0002Wave operating modelopnsense2otel · OPN-0021HAProxy maintenance-state visibility (api/haproxy/maintenance/searchServer)synthkit · SKT-0012.05skcapture and skforge: cover the in-cluster RBAC path and a non-EKS substrateopnsense2otel · OPN-0100Define a Content-Security-Policy for the embedded consoleopnsense2otel · OPN-0033Metric naming: breaking rename of _total gauges and wireguard handshake timestamp at next majorsynthkit · SKT-0010Make the signal-fidelity comparator trustworthy and give the gate teethsynthkit · SKT-0010.21Bring the signal-fidelity report under its documented 27,212-line boundsynthkit · SKT-0012.10skforge: fail clearly on a non-EKS or undetermined capture instead of emitting an AWS placeholder skeletonsynthkit · SKT-0014.03Deploy synthkit to the lab cluster as an ArgoCD applicationcodexlb2otel · CXO-0033Make just test-corpus finish: the race-detector corpus suite cannot complete 70 archives inside its 4h timeoutcodexlb2otel · CXO-0036Bound the cross-response correlation index globally, not only per threadcodexlb2otel · CXO-0038Retire stale operating statements: corpus-backed just test, the RELEASE_PLEASE_TOKEN comment, and unchecked doc anchorssynthkit · SKT-0020.05Make per-substrate divergence first-class in the comparatortailscale2otel · TSO-0142Emit the modeled capability scope preflight metric at runtimetailscale2otel · TSO-0143Give coordinated replicas per-replica persistent state so the lab can run two replicassynthkit · SKT-0010.02Record real instrument types in both corpus producerssynthkit · SKT-0011User-acceptance round: agent-run scenarios on a clean machine and a fresh Grafana Cloud stacksynthkit · SKT-0010.08Fold classic-histogram component suffixes in the gcx read-back producersynthkit · SKT-0004sigil: -once -dump generation/score COUNTS vary run-to-run — decide whether that is by design or a determinism defectsynthkit · SKT-0010.07Correct two emitter shape defects the coverage audit surfacedsynthkit · SKT-0021.01118 instrument_mismatch gaps are all reality=unknown: decide capture enrichment or absent-evidencesynthkit · SKT-0006Signal fidelity audit: validate emitted telemetry shapes against real captured telemetry
19
synthkit · SKT-0007.08Emit the CloudWatch group OTel-native under the metric-stream naming lawsynthkit · SKT-0013Model the documented k8s-monitoring deployment permutationssynthkit · SKT-0007.07Emit beyla_agent and envoy_gateway OTel-nativesynthkit · SKT-0010.20Correct kubelet runtime operation labels from upstream sourceopnsense2otel · OPN-0053Restyle the embedded console onto design system v2 (family follower)opnsense2otel · OPN-0060Prove live Loki and OTLP delivery end to end against the m7kni stacktailscale2otel · TSO-0140Give the lab deployment a rollout trigger so it tracks releases instead of a stale main digestopnsense2otel · OPN-0096Triage the standing nightly and release-vm canary drift findings open since 2026-09-01opnsense2otel · OPN-0098Reclaim expired Zenarmor inventory entries before rejecting fresh sightingstailscale2otel · TSO-0139Expose safe log-stream destination configuration alongside delivery healthtailscale2otel · TSO-0141Bring the lab configuration up to the shipped feature set and adjudicate the zero-sample signal familiestailscale2otel · doc-0005Shipped-signal presence ledgercodexlb2otel · CXO-0027Preserve plaintext function-call arguments across content sinkscodexlb2otel · CXO-0028Correlate tool results with invocations across response boundariescodexlb2otel · CXO-0029Preserve source ordering and capture times for conversation contentcodexlb2otel · CXO-0030Enrich conversation latency with proxy admission and queue waitscodexlb2otel · CXO-0031Attach structured upstream error diagnostics to conversation recordscodexlb2otel · CXO-0032Adopt the 2026-09-05 wire additions: turn_trigger, safety-buffering reasons, reasoning context, access programs, and the unnamed keepalive and response.metadata eventsopnsense2otel · OPN-0095Firmware-status cache pins a transient empty last_check for the full TTL