Open work
Everything in flight.
268 open tasks across 22trackers, most recently touched first. Filter it down, choose a column heading to sort, or open a board for the columns.
No tasks match these filters. Clear them to see all tasks.
synthkit · SKT-0247Classify baseline public provisioning preview refusalsgraph2otel · GTO-0003CI red since 2026-08-10: chart README drifted from its template in cede7ddgenai-otel-bridge · GOB-0022Flatten the e2e utility image for containerd-backed Dockergraph2otel · GTO-0013Resolve called compression decoder vulnerability in the audit gatecf2otel · CFO-0092aigateway.logs still needs about 97% of a 300s interval per poll and flaps the slow-poll and backlog alertscf2otel · CFO-0086AI Gateway: take token usage from the response body when the log record reports zerografana-cloud-org-insights · GCI-0146Provisioner treats a successful non-201 Admin SA create as failuregrafana-cloud-org-insights · GCI-0145Restore CI image publication after setup-trivy install script breakmeraki-dashboard-exporter · MDE-0075Reconcile the AGENTS.md metrics-surface rule with the opt-in OTLP metrics bridgetailscale2otel · TSO-0197Bound expanded startup replay memory without stranding accepted ingress worktailscale2otel · TSO-0197.02Preserve required delta first-cover effects across failed scheduled collectiontailscale2otel · TSO-0211Keep dense entity and category labels readable in dashboard panelstailscale2otel · TSO-0212Keep table measurements visible ahead of metadatatailscale2otel · TSO-0213Distinguish absent telemetry from healthy states in generated panelstailscale2otel · TSO-0215Keep metadata free of numeric and duration formattingtailscale2otel · TSO-0216Restore meaningful category names in distribution chartstailscale2otel · TSO-0218Join related measurements into coherent per-entity table rowstailscale2otel · TSO-0219Align health and inventory colors with documented semanticstailscale2otel · TSO-0220Keep default annotations and time axes from obscuring tracestailscale2otel · TSO-0235Render actionable trace results when the dashboard search returns datatailscale2otel · TSO-0233Render duration rates as dimensionless quantitiestailscale2otel · TSO-0234Label histogram heatmap intensity as observation frequencytailscale2otel · TSO-0226Keep rolling audit-log counts distinct from per-second ratestailscale2otel · TSO-0227Name used scrape budget consistently with the displayed fractiontailscale2otel · TSO-0228Expose truthful receiver batch trace observations on the durable WAL pathtailscale2otel · TSO-0229Name active-series cap utilization as a ratio rather than a counttailscale2otel · TSO-0230Keep whole-panel absence explanations out of nullable table cellstailscale2otel · TSO-0231Show top node-pair talkers as an identifiable rankingtailscale2otel · TSO-0232Keep default log rows scannable while retaining metadata detailstailscale2otel · TSO-0225Render device-country markers for a populated valid-code frametailscale2otel · TSO-0224Make ingestion and export cost comparisons dimensionally consistenttailscale2otel · TSO-0217Use a comparable scale and explicit measures for observed flow bytestailscale2otel · TSO-0221Make topology panels interpretable in populated and empty statestailscale2otel · TSO-0222Restore Active series by metric family rendering on Grafana 13tailscale2otel · TSO-0223Use the correct ratio scale for delivery failure chartstailscale2otel · TSO-0214Keep the organization-tailnet card legible when data is absenttailscale2otel · TSO-0210Define a freshness contract for bounded scans of large flat object archivesopenbao-plugin-secrets-github · OBG-0003Switch auto-rc's publish call to the $/ self-repository syntax once actionlint accepts itsynthkit · SKT-0246Diagnose the non-HA Fleet ledger release failure in the owned CLI teardown testsynthkit · SKT-0245Stabilise the owned Fleet HA interruption and recovery test under loadsynthkit · SKT-0244Fix realism engine review minorssynthkit · SKT-0168.09Make the private pipeline demo production-plausible and its dashboards read as real operations viewssynthkit · SKT-0224Bound dynamic legacy timing evaluation cost before broad live usesynthkit · SKT-0227Remove quadratic emitted-log lookup from app proofs without changing their coveragesynthkit · SKT-0229Reuse canonical parity metric bytes without weakening full wire proofsynthkit · SKT-0243Bring the app package race run back under the hosted test timeoutsynthkit · SKT-0242Stabilise the Fleet HA graceful restart test's lease lookup timeoutsynthkit · SKT-0241Seed item stocks from the arrival rate over the residence windowsynthkit · SKT-0240Read telemetry DSL field comments into the generated blueprint schemasynthkit · SKT-0239Step a last-success timestamp on a declared schedulesynthkit · SKT-0230Map private realism recommendations to engine featuressynthkit · SKT-0231Share per-request draws across every line of one log bundlesynthkit · SKT-0232Give log bundle lines their own event time advancing by each line's dwellsynthkit · SKT-0233Model ledger-driven stocks that accumulate and drainsynthkit · SKT-0234Drive histogram observation counts from the same arrival counterssynthkit · SKT-0235Add collector self-telemetry value sourcessynthkit · SKT-0236Support per-source time zone and batch-shaped arrivalssynthkit · SKT-0237Document the realism engine features in field docs and signalssynthkit · SKT-0238Review the composed realism landingsynthkit · SKT-0158Diagnose intermittent HA renewal-loss observation timeout under loaded gatessynthkit · SKT-0223Classify unchanged custody forecast race failure in composed telemetry gatesynthkit · SKT-0168.07Extend the private operational dashboard with sourced AWS observationssynthkit · SKT-0182Adopt causal incidents across the shipped blueprintssynthkit · SKT-0182.02Migrate shipped blueprints to declared causes, one family per lanesynthkit · SKT-0202Report a bound Lambda's failed executions at their real durationsynthkit · SKT-0203Join a synchronously invoked function's trace to its caller during the callsynthkit · SKT-0205Align the causal model's downstream reject reads and timeout resends with the appsynthkit · SKT-0206Lay baseline-failed causal requests on the engine timelinesynthkit · SKT-0207Report a bound agent runtime's failed invocations at their real latencysynthkit · SKT-0208Let several unreserved Lambda functions share one account-level causal concurrency poolsynthkit · SKT-0211Make causal span timestamps identical on amd64 and arm64synthkit · SKT-0212Declare a per-resource failed-call hold instead of a shared pre-work constantsynthkit · SKT-0213Use the declared healthy reference before a healthy window is learnedsynthkit · SKT-0214Let causally bound function duration follow a declared load curvesynthkit · SKT-0215Represent handled data-quality rejection spans as UNSET with a rejection markersynthkit · SKT-0216Decorate baseline failures only for faults on their own causal pathsynthkit · SKT-0217Evaluate retrieval rejection after the store call completessynthkit · SKT-0218Bind all five declared document-store clients to their causal resourcessynthkit · SKT-0219Correct stale causal timing comments and parentless-span exemption scopesynthkit · SKT-0128Classify and repair the Fleet HA fixture initial Lease timeout without weakening proofsynthkit · SKT-0156Diagnose bounded HA helper HTTP readiness failure under the full race gatesynthkit · SKT-0221Support scoped parameterized export of the process operational dashboardsynthkit · SKT-0222Add a synthetic-telemetry dashboard template for otlp-nativesynthkit · SKT-0087Support the AI Factory use case end to endsynthkit · SKT-0102Checkpoint cumulative state and backfill gaps across restartssynthkit · SKT-0168Model a generic CRM data-pipeline estate: AWS data-service CloudWatch families, coherent pipeline runs and Solacesynthkit · SKT-0168.02Live-capture and add CloudWatch families for Lambda, DynamoDB, SQS, provisioned Redshift and CloudWatch Logs deliverysynthkit · SKT-0168.03Drive Glue, MWAA, Lambda, SQS and Redshift coherently from declared pipeline runs, with stall and run-failure modessynthkit · SKT-0168.08Route the private demo's alerts through on-call and incident toolingsynthkit · SKT-0153.04Call hooks:evaluate from synthetic agents with real provisioned rulessynthkit · SKT-0165Source system.io.rrqm_s and wrqm_s for the Datadog standalone-host lanesynthkit · SKT-0153Model pharma regulatory document authoring on current Agent Observabilitysynthkit · SKT-0153.03Provision Agent Observability evaluators, hook rules, evaluation rules and suites from blueprintssynthkit · SKT-0153.05Model a multi-service agent pipeline with review loops and terminal outcomessynthkit · SKT-0153.05.03Wire agent namespace claims and receipt-backed runtime admissionsynthkit · SKT-0153.06Run real Agent Observability experiments from synthkitsynthkit · SKT-0153.09Ship the pharma-regulatory-authoring blueprintsynthkit · SKT-0153.10Document, gate and live-verify the pharma regulatory authoring estatepaperless-ngx-dedupe · PND-0008Update Node and container trust for eMudhra remediationgraph2otel · GTO-0012Preserve raw Graph POST bodies through Kiota retriesmeraki-dashboard-exporter · MDE-0074Refresh dependency trust stores and publish the patched imagegenai-otel-bridge · GOB-0021Retry Kubernetes 1.37.1 envtest update when upstream artifacts exist.github · GHC-0007Make the shared actionlint reusable accept ubuntu-26.04opnsense2otel · OPN-0142Refresh Go and certificate trust dependencies and publish releasegrafana-cloud-agento11y-demo · AIO-0007Track unpatched braces advisory in the SDK Google ADK dependencygrafana-cloud-agento11y-demo · AIO-0017Handle large S3 object-version responses during demo teardowngrafana-cloud-agento11y-demo · AIO-0015Deduplicate replayed terminal records from completed Kubernetes Jobsgrafana-cloud-agento11y-demo · AIO-0005.08Release and single host-replacement rollout for Codex and pigrafana-cloud-agento11y-demo · AIO-0009Improve existing dashboard category legends and sanitize IAM role labelsgrafana-cloud-agento11y-demo · AIO-0005.06Observability for Codex and pi: Coding agents view first, optional dashboardsgrafana-cloud-agento11y-demo · AIO-0005Add Codex, pi, Copilot and Cursor developers to the agent hostgrafana-cloud-agento11y-demo · AIO-0005.03Codex developer: spike, image, runner and telemetrygrafana-cloud-agento11y-demo · AIO-0005.04pi developer: spike, image, runner and telemetrygrafana-cloud-agento11y-demo · AIO-0005.09Copilot CLI developer: go/no-go spike, then implementgrafana-cloud-agento11y-demo · AIO-0005.10Cursor CLI developer: go/no-go spike, then implementgrafana-cloud-org-insights · GCI-0137Keep platform reads out of the org's Adaptive Telemetry usage signalsopnsense2otel · OPN-0104Retire the syslog debug-capture mount on camdenopnsense2otel · OPN-0118Emit native (exponential) histograms instead of classical bucketssynthkit · SKT-0117Remove private integration evidence paths from public task notesgrafana-cloud-reference-examples · GRE-0005Keep uv.lock in step with release-please version bumpscf2otel · CFO-0081Load balancer regional and origin health and RTTsynthkit · SKT-0087.03Add an SNMP exporter construct for device health (IF-MIB plus vendor modules)grafana-cloud-vending-machine · GCV-0102Record and document what happens to a vended connection Secret when its managed resource is removedsynthkit · SKT-0087.21Ship an ai-factory reference blueprintsynthkit · SKT-0087.05Emit NVIDIA driver kernel events (Xid, SXid, NVRM) in GPU host logssynthkit · SKT-0087.06Add NVIDIA GPU Operator, Network Operator and device plugin add-on telemetrysynthkit · SKT-0087.24Source deferred DCGM product envelopes and NVSwitch/Grace profilessynthkit · SKT-0087.19Add GPU inference-serving engine telemetry (vLLM, Triton, NIM)synthkit · SKT-0087.07Add a Redfish BMC hardware construct (inventory, health, power, thermal, events)grafana-cloud-vending-machine · GCV-0074The vended Git Sync connection cannot be created on Grafana Cloudsynthkit · SKT-0087.14Add rack power and liquid-cooling telemetry (PDU, power shelf, CDU, leak detection)synthkit · SKT-0087.11Add Mission Control platform state, autonomous recovery events and forwarded Alertmanager alertssynthkit · SKT-0087.18Add Slurm scheduler telemetry and DCGM HPC job mappingsynthkit · SKT-0087.09Add NVLink domain telemetry for NVL72 racks (NMX-Telemetry and NetQ NVLink)synthkit · SKT-0087.08Add Spectrum-X / Cumulus Linux fabric telemetry via NetQ and switch OTLP exportsynthkit · SKT-0087.10Add Base Command Manager CMDaemon exporter telemetrysynthkit · SKT-0087.12Add Run:ai scheduler telemetry with workload-to-GPU allocationsynthkit · SKT-0087.13Add VAST Data storage telemetry (Prometheus exporter and events)synthkit · SKT-0087.15Spike: facility BMS cooling telemetry (BACnet, MQTT) for liquid-cooled AI rackssynthkit · SKT-0087.20Ship AI Factory cross-domain incident scenariossynthkit · SKT-0087.22Add AI Factory dashboards over the reference blueprintgrafana-cloud-vending-machine · GCV-0084Re-enable repository secure values once the vendor fixes the reference-form refusalgrafana-cloud-reference-examples · GRE-0002Recognise Powertools Logger output in a CloudWatch Lambda logs to Loki examplegrafana-cloud-reference-examples · GRE-0003Check whether Loki drops repeated identical lines within one object at ingestion time.github · GHC-0006Fleet CI cache hygiene: registry buildx cache in container-publish and per-repo cache fixespaperless-ngx-dedupe · PND-0006CI: quality job red on main since 2026-09-25 (vendored design bundle lint and prettier)mq-exporter-dist · MQ-2Reconcile linux build image digest with recorded build inputmq-exporter-dist · MQ-3Harden Windows CI input downloads against transient TLS and IBM outagesmq-exporter-dist · MQ-4Retest v6.0.0-1 Windows installer changes on native Server 2019mq-exporter-dist · MQ-5Refresh the native Linux install-cycle test for current release tracksgenai-otel-bridge · GOB-0020Prune change-detector unit testsgraph2otel · GTO-0010Add a read-only live API contract test layergraph2otel · GTO-0011Prune tautological and change-detector unit testsmeraki-dashboard-exporter · MDE-0073Prune tautological and change-detector unit testspaperless-ngx-dedupe · PND-0007Prune tautological and change-detector unit testsgenai-otel-bridge · GOB-0017Default to native (exponential) histograms for all histogram instrumentsgenai-otel-bridge · GOB-0001Don't promote service.version to a per-series metric labelgenai-otel-bridge · GOB-0002Tune bucket_settle from the revised-after-settle age histogramgenai-otel-bridge · GOB-0007LangSmith bulk-export to S3 (Parquet)genai-otel-bridge · GOB-0008Portkey S3-side log ingestion (Option A: bucket notification then download)genai-otel-bridge · GOB-0009Add a further gateway or eval-platform vendor sourcegenai-otel-bridge · GOB-0010LangSmith OAuth auth model (only if a deployment mandates it)genai-otel-bridge · GOB-0011Plugin runtime / dynamic SPI for out-of-tree sourcesgenai-otel-bridge · GOB-0013Portkey multi-workspace targeting and auto-discoverysynthkit · SKT-0071Settle the two remaining Azure managed Service Bus error producer pairsmeraki-dashboard-exporter · MDE-0002Size the Helm resource defaults from a measured MEDIUM-class fleetmeraki-dashboard-exporter · MDE-0004MV: migrate off the deprecated camera analytics endpointspaperless-ngx-dedupe · PND-0004Restyle the web app onto design system v2graph2otel · GTO-0008Restyle the embedded admin console onto design system v2 (family follower)polylens2otel · PLO-0004Migrate the repo task surface to just and retire Makefiles and ad-hoc scriptsbumblebee-catalog · BBC-0004Decide how to handle GitHub scheduled-workflow drift on the catalog crons.github · GHC-0004Fleet campaign: roll the justfile task surface out to every repo.github · GHC-0005Harvest harden-runner egress audits into a fleet network-surface report, then move to block modegraph2otel · GTO-0004Upgrade Go toolchain to 1.27graph2otel · GTO-0006Remove the deleted goroutineleakprofile experiment for Go 1.27polylens2otel · PLO-0003Upgrade Go toolchain to 1.27rfc6035-2otel · VQR-0002Upgrade Go toolchain to 1.27.github · GHC-0002Auto-RC prerelease channel and release hygienegraph2otel · GTO-0005Add cloud environment setup scriptrfc6035-2otel · VQR-0001Use AAISP special codes to generate real VQ reports and replace synthetic fixturespolylens2otel · PLO-0002Receive phone-pushed events via apps.telNotification (registration state, call events)polylens2otel · PLO-0001Close the wave-3 GHCR cleanup gate (former #49/#60/#47 remainder)sf2loki · SFL-0001Don't promote service.version to a per-series metric label (OTLP→Prometheus: version belongs on target_info/build_info)sf2loki · SFL-0002pipeline: a shutdown-abandoned batch is silently leapfrogged by the next same-key commit - undelivered events lostsf2loki · SFL-0003eventlog_objects: no visibility-lag bound - rows that become queryable after the watermark passed their timestamp are lost silentlysf2loki · SFL-0004egress: only one of two budget-pause waiters detects the UTC-day rollover - the other lane stalls ~24h while readiness reports readysf2loki · SFL-0005backfill: entries omit the deployment identity labels (job/service_name/environment/sf_org_id) and the org labelsf2loki · SFL-0006obs: idle/transition-only gauges stop exporting and noDataState: Ok hides it - no-recent-push, leader-anomaly and api-limit-low alerts can't be trustedsf2loki · SFL-0007sources: dual wildcard (pubsub `topics: ["*"]` + eventlogfile `event_types: ["*"]`) silently double-ingests every shared categorysf2loki · SFL-0008pubsub: bridge byte budget is never reset per run - charges leaked on a mid-drain teardown stall every topic after leadership re-acquisitionsf2loki · SFL-0009apexlog: a single transient body-download failure permanently loses the log body — no retry, and the checkpoint advances past itsf2loki · SFL-0010salesforce: a 2xx SOQL response with a non-JSON body escapes the SoqlError family and crash-loops the processsf2loki · SFL-0011eventlog_objects: the big-object tie escape grows Id NOT IN without bound - a >~500-row tie group halts the object permanentlysf2loki · SFL-0012coordinate: file lease blind-rewrites the lease when the verify re-read also fails — residual #50 window, and the epoch fence regressessf2loki · SFL-0013ha: an epoch-fenced stale leader shuts the whole process down (exit 0) instead of demoting to standbysf2loki · SFL-0014coordinate: k8s_lease has no epoch fence - a stale leader can still regress a shared file checkpoint storesf2loki · SFL-0015coordinate: a lost/corrupt lease file resets the fence epoch to 1 and the legitimate leader fences itself out of its own checkpointssf2loki · SFL-0016obs: multi-org deployments emit no watermark_ts / last_replay_commit_ts (the org= key prefix defeats the prefix match)sf2loki · SFL-0017cli: doctor never probes the real state file, its .lock sidecar, or the lease file - an unreadable one passes preflight and crash-loops the daemonsf2loki · SFL-0018cli: `sf2loki state` lock refusal never fires under a non-noop coordinator - the live leader silently reverts an operator's checkpoint repairsf2loki · SFL-0019eventlogfile: guard the checkpoint decode - a bare-timestamp or garbage watermark crash-loops the daemon or permanently stalls the typesf2loki · SFL-0020backfill: unbounded memory - whole ELF CSVs materialized as row lists, with download lookahead bounded only by page_sizesf2loki · SFL-0021obs: ingest-lag alert breaches on every EventLogFile drain - label sf2loki_ingest_lag_seconds by source and alert per sourcesf2loki · SFL-0022grafana: ELF-scoped Loki alert and recording rules query trailing 5-10m windows EventLogFile timestamps never occupy - they can never fire or recordsf2loki · SFL-0023grafana: security dashboard country panels extract COUNTRY_CODE, a field the Login EventLogFile row does not havesf2loki · SFL-0024obs: apex-performance callout latency panels unwrap RUN_TIME, which Salesforce leaves unpopulated for ApexCallout - use TIMEsf2loki · SFL-0025auth: org_id() userinfo auth failure never invalidates the cached token - multi-org pubsub topics stay unsubscribed for up to token_ttlsf2loki · SFL-0026sources: multi-org org-id resolution re-runs a failing userinfo fetch per entry, silently — negative-cache it, log once, and resolve it in the startup probesf2loki · SFL-0027tests: k8s lease hold/acquire error branches are untested - the renew-409 CAS surrender has no covering testsf2loki · SFL-0028tests: the ApexLog compound (StartTime, Id) cursor SOQL from the #39 fix is asserted nowheresf2loki · SFL-0029tests: pin the ApexLog error-recovery paths - listing failure, mid-page throttle abort, body-download fallbacksf2loki · SFL-0030tests: pin the leadership-lifecycle paths in app.py that no test executes (fence absorption, poller teardown, finite-run completion)sf2loki · SFL-0031tests: the CLI backfill success path is entirely uncovered - org identity and argument wiring can regress silentlysf2loki · SFL-0032cli: doctor's Loki test write uses a bare payload — a backend that rejects structured metadata passes preflight, then drops 100% of real datasf2loki · SFL-0033sink: dead-letter capture + replay for permanently dropped entriessf2loki · SFL-0034shaping: runtime cardinality guard for promoted per-type stream labelssf2loki · SFL-0035cli: doctor's pubsub probe discards TopicInfo.can_subscribe - a topic the integration user cannot subscribe to reports PASSsf2loki · SFL-0036obs: local /statusz snapshot endpoint - runtime state is unreachable when OTLP metrics are off or the collector is downsf2loki · SFL-0037cli: backfill --dry-run — preview file count, source bytes and API calls before pushing a historical windowsf2loki · SFL-0038pubsub: wildcard topic discovery only matches *EventStream - the Event/EventStore RTEM family (Threat Detection anomaly channels) is never discoveredsf2loki · SFL-0039sink: per-org Loki tenant fan-out (X-Scope-OrgID routing) for multi-org isolationsf2loki · SFL-0040ha: object-store lease coordinator (s3_lease / gcs_lease) for stateless platformssf2loki · SFL-0041security: scrub inline URL credentials from the startup banner and doctor endpoint outputsf2loki · SFL-0042eventlogfile: a throttled EventType discovery doesn't seed the cycle's throttle gate - the first `concurrency` types still burn the exhausted budget and the tail types silently starvesf2loki · SFL-0043eventlog_objects: big-object drain re-emits a >500-row timestamp tie group every poll cycle (capped dedup window has no at-watermark exemption)sf2loki · SFL-0044config: reject org/sf_org_id/environment in sink.loki.labels under multi-org (static labels silently clobber per-org identity)sf2loki · SFL-0045state: a retried s3/gcs conditional write manufactures a false CAS conflict after a lost response - verify before crashingsf2loki · SFL-0046state: the s3 checkpoint body read and JSON parse sit outside the transient-retry envelope (#44 follow-up)sf2loki · SFL-0047config: a blank secret is treated as present — an empty inline/env value shadows *_file and an empty secret file resolves to SecretStr('')sf2loki · SFL-0048cli: run/backfill dump a traceback (exit 1) for non-ConfigError wiring failures - overlap and label-guard errors bypass the documented exit-2 contractsf2loki · SFL-0049backfill: checkpoints always go to a local file derived from state.file.path, ignoring state.store — no resumable backfill on s3/gcs deploymentssf2loki · SFL-0050cli: backfill --event-types skips the SOQL-identifier guard config enforces, and "*" silently backfills nothingsf2loki · SFL-0051deploy: docker-compose/Helm memory sizing predates the per-lane queue split - stated ceiling is 256 MiB below the documented worst casesf2loki · SFL-0052auth: invalidate() clears any cached token, so a stale-token 401 discards a freshly minted one (redundant re-mint churn)sf2loki · SFL-0053config: salesforce.token_ttl has no lower bound - a value at or below the 60s refresh skew re-mints a token on every Salesforce API callsf2loki · SFL-0054tests: pin the untested legs of the s3/gcs checkpoint retry classifier (raw 5xx, OSError family, non-Exception)sf2loki · SFL-0055tests: big-object drain SoqlError containment and the DESC no-progress stall guard are untestedsf2loki · SFL-0056tests: multi-org App.run() startup branch is never executed - deployment_static_labels has no testsf2loki · SFL-0057tests: pin the file-lease coordinator's write-failure, verify-read-error, renewal-tolerance and corrupt-lease branchessf2loki · SFL-0058tests: pin the EventLogFile cycle unwind on early aclose/cancel and the mid-file throttle abortsf2loki · SFL-0059cli: state export/import for migrating checkpoints between backends (file -> s3/gcs)sf2loki · SFL-0060cli: doctor only ever checks one org — add `--all-orgs` for a whole-deployment preflightsf2loki · SFL-0061obs: sf2loki_loki_entries_dropped carries only `reason` - attribute drops by source/event_type/orgsf2loki · SFL-0062pubsub: opt-in ManagedSubscribe mode - server-side replay commits via Managed Event Subscriptionssf2loki · SFL-0063sink: optional S3 archive tee (WORM/Object Lock) for long-term compliance retentionsf2loki · SFL-0064state: Azure Blob checkpoint store backendsf2loki · SFL-0065obs: optional OTel traces over the already-shipped OTLP exporter for per-stage pipeline timelinessf2loki · SFL-0066salesforce: SOQL interpolation guards are inconsistent - apexlog Id cursor unescaped, backfill --event-types unvalidatedsf2loki · SFL-0067helm: don't automount the ServiceAccount API token unless the pod actually talks to the API serversf2loki · SFL-0068deploy: docker-compose runs unhardened (no read_only / cap_drop / no-new-privileges) and the image chowns /app to the runtime uidsf2loki · SFL-0069dist: pin the build toolchain for the PyPI publish job - uv and the hatchling build backend resolve unpinned at release timesf2loki · SFL-0070helm: lease RBAC silently binds to the namespace `default` ServiceAccount when serviceAccount.create=false with no namesf2loki · SFL-0071docs: the Kubernetes hardening claim is false - podSecurityContext/securityContext are plain overridable valuessagemcom-f3896-py · FSG-0001Replace the hand-concatenated two-registry /metrics responsegraph2otel · GTO-0002About 90 prose references still point readers at CLAUDE.md, now a 6-line import stubbumblebee-catalog · BBC-0001Bump CATALOG_SCHEMA_VERSION to 0.2.0 once the fleet runs a binary that accepts itbumblebee-catalog · BBC-0002Include the agent-skill ecosystem in datadog-malicious.json once it is in the published catalog schema enumbumblebee-intune · BBI-0002Wire the real gates into CIbumblebee-intune · BBI-0001Fix check-tier-consistency.py: it cannot run in this repo's layoutbumblebee-intune · BBI-0003Clear the deploy/ path residue from docstringsbumblebee-intune · BBI-0004Silence the two SC2086 hits in installer.sh — do NOT quote themgraph2otel · GTO-0001Nine docs hyperlinks point at deleted GitHub issues and 404 on the public sitepaperless-ngx-dedupe · PND-0001Finish the UI component adoption sweep in packages/webmeraki-dashboard-ha · MDH-0004Webhook receiver for real-time Meraki alertsmeraki-dashboard-ha · MDH-0005Close integration test coverage gapsmeraki-dashboard-ha · MDH-0001Expose MT sensor alert profiles as entitiesmeraki-dashboard-ha · MDH-0002Alert category taxonomy and resolution trackingmeraki-dashboard-ha · MDH-0003Use encode_params for array-of-objects query filters