Open work
Everything in flight.
148 open tasks across 19trackers, most recently touched first. Filter it down, or open a board for the columns.
No tasks match these filters. Clear them to see all tasks.
opnsense2otel · OPN-0109Raise and lower the oli testbed from CI over forced-command SSHopnsense2otel · OPN-0113Decide per endpoint whether to prune the pre-26.7 legacy payload shimsopnsense2otel · OPN-0110Consolidate the testbed to three guests and run the canary profiles sequentiallygrafana-cloud-vending-machine · GCV-0074The vended Git Sync connection cannot be created on Grafana Cloudgrafana-cloud-vending-machine · GCV-0075Vended rotating tokens can never rotate, so every stack loses its credentials at the first rotation windowgrafana-cloud-vending-machine · GCV-0069Let the alerting and oncall APIs express an IRM Slack destination end to endgrafana-cloud-vending-machine · GCV-0078Migrate the pre-organization estate onto the current request schema and move its output identity with itgrafana-cloud-vending-machine · GCV-0077Composed resources churn hard enough to hold the composite watch circuit breaker open on every stackgrafana-cloud-vending-machine · GCV-0084Re-enable repository secure values once the vendor fixes the reference-form refusalgrafana-cloud-vending-machine · GCV-0079Provision datasources, a folder and Git Sync into a stack the platform does not own, driven by an external project CRgrafana-cloud-vending-machine · GCV-0080Vend a whole Grafana Cloud stack in response to an external project CR appearingsynthkit · SKT-0077Emit the non-network Datadog standalone-host breadth from the committed verdictsynthkit · SKT-0079Add a selectable OTel-receiver pod-log resource shape and declare otel-receivers modelledsynthkit · SKT-0071Settle the two remaining Azure managed Service Bus error producer pairsgrafana-cloud-org-insights · GCI-0025Verify what traces:read and profiles:read actually permit, with an isolated mint-and-delete probegrafana-cloud-org-insights · GCI-0026Validate the Loki retention surface against an authorised development deploymentgrafana-cloud-org-insights · GCI-0010Firehose log subscription cannot be created by a new deployment - trust policy demands a SourceArn CloudWatch Logs never sendsgrafana-cloud-org-insights · GCI-0027Add a fleet-wide opt-in for unfixed Trivy findings in the reusable container publishergrafana-cloud-org-insights · GCI-0018Detect PII and unbounded-cardinality label patterns as a risk findinggrafana-cloud-org-insights · GCI-0020Publish Adaptive Traces enablement and sampling savingstailscale2otel · TSO-0148Decouple ingress WAL completion from metric collection to preserve configured DPMopnsense2otel · OPN-0104Retire the syslog debug-capture mount on camdentailscale2otel · TSO-0133Review the coordination alert firing history and decide paging, due 2026-09-11meraki-dashboard-exporter · MDE-0002Size the Helm resource defaults from a measured MEDIUM-class fleetmeraki-dashboard-exporter · MDE-0004MV: migrate off the deprecated camera analytics endpointspaperless-ngx-dedupe · PND-0004Restyle the web app onto design system v2graph2otel · GTO-0008Restyle the embedded admin console onto design system v2 (family follower)polylens2otel · PLO-0004Migrate the repo task surface to just and retire Makefiles and ad-hoc scriptsbumblebee-catalog · BBC-0004Decide how to handle GitHub scheduled-workflow drift on the catalog crons.github · GHC-0004Fleet campaign: roll the justfile task surface out to every repo.github · GHC-0005Harvest harden-runner egress audits into a fleet network-surface report, then move to block modegrafana-cloud-org-insights · GCI-0017Match services to dashboards by query selector, name and spread guardgrafana-cloud-org-insights · GCI-0005Run a clean-room zero-to-live operator walkthroughfleet-management-operator · FMO-0005Upgrade Go toolchain to 1.27graph2otel · GTO-0004Upgrade Go toolchain to 1.27graph2otel · GTO-0006Remove the deleted goroutineleakprofile experiment for Go 1.27polylens2otel · PLO-0003Upgrade Go toolchain to 1.27rfc6035-2otel · VQR-0002Upgrade Go toolchain to 1.27.github · GHC-0002Auto-RC prerelease channel and release hygienegraph2otel · GTO-0005Add cloud environment setup scriptgraph2otel · GTO-0003CI red since 2026-08-10: chart README drifted from its template in cede7ddrfc6035-2otel · VQR-0001Use AAISP special codes to generate real VQ reports and replace synthetic fixturespolylens2otel · PLO-0002Receive phone-pushed events via apps.telNotification (registration state, call events)polylens2otel · PLO-0001Close the wave-3 GHCR cleanup gate (former #49/#60/#47 remainder)sf2loki · SFL-0001Don't promote service.version to a per-series metric label (OTLP→Prometheus: version belongs on target_info/build_info)sf2loki · SFL-0002pipeline: a shutdown-abandoned batch is silently leapfrogged by the next same-key commit - undelivered events lostsf2loki · SFL-0003eventlog_objects: no visibility-lag bound - rows that become queryable after the watermark passed their timestamp are lost silentlysf2loki · SFL-0004egress: only one of two budget-pause waiters detects the UTC-day rollover - the other lane stalls ~24h while readiness reports readysf2loki · SFL-0005backfill: entries omit the deployment identity labels (job/service_name/environment/sf_org_id) and the org labelsf2loki · SFL-0006obs: idle/transition-only gauges stop exporting and noDataState: Ok hides it - no-recent-push, leader-anomaly and api-limit-low alerts can't be trustedsf2loki · SFL-0007sources: dual wildcard (pubsub `topics: ["*"]` + eventlogfile `event_types: ["*"]`) silently double-ingests every shared categorysf2loki · SFL-0008pubsub: bridge byte budget is never reset per run - charges leaked on a mid-drain teardown stall every topic after leadership re-acquisitionsf2loki · SFL-0009apexlog: a single transient body-download failure permanently loses the log body — no retry, and the checkpoint advances past itsf2loki · SFL-0010salesforce: a 2xx SOQL response with a non-JSON body escapes the SoqlError family and crash-loops the processsf2loki · SFL-0011eventlog_objects: the big-object tie escape grows Id NOT IN without bound - a >~500-row tie group halts the object permanentlysf2loki · SFL-0012coordinate: file lease blind-rewrites the lease when the verify re-read also fails — residual #50 window, and the epoch fence regressessf2loki · SFL-0013ha: an epoch-fenced stale leader shuts the whole process down (exit 0) instead of demoting to standbysf2loki · SFL-0014coordinate: k8s_lease has no epoch fence - a stale leader can still regress a shared file checkpoint storesf2loki · SFL-0015coordinate: a lost/corrupt lease file resets the fence epoch to 1 and the legitimate leader fences itself out of its own checkpointssf2loki · SFL-0016obs: multi-org deployments emit no watermark_ts / last_replay_commit_ts (the org= key prefix defeats the prefix match)sf2loki · SFL-0017cli: doctor never probes the real state file, its .lock sidecar, or the lease file - an unreadable one passes preflight and crash-loops the daemonsf2loki · SFL-0018cli: `sf2loki state` lock refusal never fires under a non-noop coordinator - the live leader silently reverts an operator's checkpoint repairsf2loki · SFL-0019eventlogfile: guard the checkpoint decode - a bare-timestamp or garbage watermark crash-loops the daemon or permanently stalls the typesf2loki · SFL-0020backfill: unbounded memory - whole ELF CSVs materialized as row lists, with download lookahead bounded only by page_sizesf2loki · SFL-0021obs: ingest-lag alert breaches on every EventLogFile drain - label sf2loki_ingest_lag_seconds by source and alert per sourcesf2loki · SFL-0022grafana: ELF-scoped Loki alert and recording rules query trailing 5-10m windows EventLogFile timestamps never occupy - they can never fire or recordsf2loki · SFL-0023grafana: security dashboard country panels extract COUNTRY_CODE, a field the Login EventLogFile row does not havesf2loki · SFL-0024obs: apex-performance callout latency panels unwrap RUN_TIME, which Salesforce leaves unpopulated for ApexCallout - use TIMEsf2loki · SFL-0025auth: org_id() userinfo auth failure never invalidates the cached token - multi-org pubsub topics stay unsubscribed for up to token_ttlsf2loki · SFL-0026sources: multi-org org-id resolution re-runs a failing userinfo fetch per entry, silently — negative-cache it, log once, and resolve it in the startup probesf2loki · SFL-0027tests: k8s lease hold/acquire error branches are untested - the renew-409 CAS surrender has no covering testsf2loki · SFL-0028tests: the ApexLog compound (StartTime, Id) cursor SOQL from the #39 fix is asserted nowheresf2loki · SFL-0029tests: pin the ApexLog error-recovery paths - listing failure, mid-page throttle abort, body-download fallbacksf2loki · SFL-0030tests: pin the leadership-lifecycle paths in app.py that no test executes (fence absorption, poller teardown, finite-run completion)sf2loki · SFL-0031tests: the CLI backfill success path is entirely uncovered - org identity and argument wiring can regress silentlysf2loki · SFL-0032cli: doctor's Loki test write uses a bare payload — a backend that rejects structured metadata passes preflight, then drops 100% of real datasf2loki · SFL-0033sink: dead-letter capture + replay for permanently dropped entriessf2loki · SFL-0034shaping: runtime cardinality guard for promoted per-type stream labelssf2loki · SFL-0035cli: doctor's pubsub probe discards TopicInfo.can_subscribe - a topic the integration user cannot subscribe to reports PASSsf2loki · SFL-0036obs: local /statusz snapshot endpoint - runtime state is unreachable when OTLP metrics are off or the collector is downsf2loki · SFL-0037cli: backfill --dry-run — preview file count, source bytes and API calls before pushing a historical windowsf2loki · SFL-0038pubsub: wildcard topic discovery only matches *EventStream - the Event/EventStore RTEM family (Threat Detection anomaly channels) is never discoveredsf2loki · SFL-0039sink: per-org Loki tenant fan-out (X-Scope-OrgID routing) for multi-org isolationsf2loki · SFL-0040ha: object-store lease coordinator (s3_lease / gcs_lease) for stateless platformssf2loki · SFL-0041security: scrub inline URL credentials from the startup banner and doctor endpoint outputsf2loki · SFL-0042eventlogfile: a throttled EventType discovery doesn't seed the cycle's throttle gate - the first `concurrency` types still burn the exhausted budget and the tail types silently starvesf2loki · SFL-0043eventlog_objects: big-object drain re-emits a >500-row timestamp tie group every poll cycle (capped dedup window has no at-watermark exemption)sf2loki · SFL-0044config: reject org/sf_org_id/environment in sink.loki.labels under multi-org (static labels silently clobber per-org identity)sf2loki · SFL-0045state: a retried s3/gcs conditional write manufactures a false CAS conflict after a lost response - verify before crashingsf2loki · SFL-0046state: the s3 checkpoint body read and JSON parse sit outside the transient-retry envelope (#44 follow-up)sf2loki · SFL-0047config: a blank secret is treated as present — an empty inline/env value shadows *_file and an empty secret file resolves to SecretStr('')sf2loki · SFL-0048cli: run/backfill dump a traceback (exit 1) for non-ConfigError wiring failures - overlap and label-guard errors bypass the documented exit-2 contractsf2loki · SFL-0049backfill: checkpoints always go to a local file derived from state.file.path, ignoring state.store — no resumable backfill on s3/gcs deploymentssf2loki · SFL-0050cli: backfill --event-types skips the SOQL-identifier guard config enforces, and "*" silently backfills nothingsf2loki · SFL-0051deploy: docker-compose/Helm memory sizing predates the per-lane queue split - stated ceiling is 256 MiB below the documented worst casesf2loki · SFL-0052auth: invalidate() clears any cached token, so a stale-token 401 discards a freshly minted one (redundant re-mint churn)sf2loki · SFL-0053config: salesforce.token_ttl has no lower bound - a value at or below the 60s refresh skew re-mints a token on every Salesforce API callsf2loki · SFL-0054tests: pin the untested legs of the s3/gcs checkpoint retry classifier (raw 5xx, OSError family, non-Exception)sf2loki · SFL-0055tests: big-object drain SoqlError containment and the DESC no-progress stall guard are untestedsf2loki · SFL-0056tests: multi-org App.run() startup branch is never executed - deployment_static_labels has no testsf2loki · SFL-0057tests: pin the file-lease coordinator's write-failure, verify-read-error, renewal-tolerance and corrupt-lease branchessf2loki · SFL-0058tests: pin the EventLogFile cycle unwind on early aclose/cancel and the mid-file throttle abortsf2loki · SFL-0059cli: state export/import for migrating checkpoints between backends (file -> s3/gcs)sf2loki · SFL-0060cli: doctor only ever checks one org — add `--all-orgs` for a whole-deployment preflightsf2loki · SFL-0061obs: sf2loki_loki_entries_dropped carries only `reason` - attribute drops by source/event_type/orgsf2loki · SFL-0062pubsub: opt-in ManagedSubscribe mode - server-side replay commits via Managed Event Subscriptionssf2loki · SFL-0063sink: optional S3 archive tee (WORM/Object Lock) for long-term compliance retentionsf2loki · SFL-0064state: Azure Blob checkpoint store backendsf2loki · SFL-0065obs: optional OTel traces over the already-shipped OTLP exporter for per-stage pipeline timelinessf2loki · SFL-0066salesforce: SOQL interpolation guards are inconsistent - apexlog Id cursor unescaped, backfill --event-types unvalidatedsf2loki · SFL-0067helm: don't automount the ServiceAccount API token unless the pod actually talks to the API serversf2loki · SFL-0068deploy: docker-compose runs unhardened (no read_only / cap_drop / no-new-privileges) and the image chowns /app to the runtime uidsf2loki · SFL-0069dist: pin the build toolchain for the PyPI publish job - uv and the hatchling build backend resolve unpinned at release timesf2loki · SFL-0070helm: lease RBAC silently binds to the namespace `default` ServiceAccount when serviceAccount.create=false with no namesf2loki · SFL-0071docs: the Kubernetes hardening claim is false - podSecurityContext/securityContext are plain overridable valuessagemcom-f3896-py · FSG-0001Replace the hand-concatenated two-registry /metrics responsegenai-otel-bridge · GOB-0001Don't promote service.version to a per-series metric labelgraph2otel · GTO-0002About 90 prose references still point readers at CLAUDE.md, now a 6-line import stubfleet-management-operator · FMO-0001CollectorDiscovery pagination: adopt page_token/page_size when the Fleet SDK ships itfleet-management-operator · FMO-0002Scale subresource on selector-bearing CRDs (v1 graduation gate)fleet-management-operator · FMO-0003Close the TenantPolicy v1 gaps: collectorIDs bypass, negation/regex semantics, uncovered kindsfleet-management-operator · FMO-0004CollectorDiscovery policy.onConflict: implement TakeOwnership or drop it from the APIbumblebee-catalog · BBC-0001Bump CATALOG_SCHEMA_VERSION to 0.2.0 once the fleet runs a binary that accepts itbumblebee-catalog · BBC-0002Include the agent-skill ecosystem in datadog-malicious.json once it is in the published catalog schema enumbumblebee-intune · BBI-0002Wire the real gates into CIbumblebee-intune · BBI-0001Fix check-tier-consistency.py: it cannot run in this repo's layoutbumblebee-intune · BBI-0003Clear the deploy/ path residue from docstringsbumblebee-intune · BBI-0004Silence the two SC2086 hits in installer.sh — do NOT quote themgraph2otel · GTO-0001Nine docs hyperlinks point at deleted GitHub issues and 404 on the public sitegrotTrack · GRT-0002Publish the Tab Tracker extension to the Chrome Web Storepaperless-ngx-dedupe · PND-0001Finish the UI component adoption sweep in packages/webgenai-otel-bridge · GOB-0013Portkey multi-workspace targeting and auto-discoverymeraki-dashboard-ha · MDH-0004Webhook receiver for real-time Meraki alertsmeraki-dashboard-ha · MDH-0005Close integration test coverage gapsgenai-otel-bridge · GOB-0007LangSmith bulk-export to S3 (Parquet)genai-otel-bridge · GOB-0008Portkey S3-side log ingestion (Option A: bucket notification then download)genai-otel-bridge · GOB-0009Add a further gateway or eval-platform vendor sourcegenai-otel-bridge · GOB-0010LangSmith OAuth auth model (only if a deployment mandates it)genai-otel-bridge · GOB-0011Plugin runtime / dynamic SPI for out-of-tree sourcesgenai-otel-bridge · GOB-0012Remove the stale WIRING TODO comments in the langsmith sourcemeraki-dashboard-ha · MDH-0001Expose MT sensor alert profiles as entitiesmeraki-dashboard-ha · MDH-0002Alert category taxonomy and resolution trackingmeraki-dashboard-ha · MDH-0003Use encode_params for array-of-objects query filtersgenai-otel-bridge · GOB-0002Tune bucket_settle from the revised-after-settle age histogramgenai-otel-bridge · GOB-0003Instrument the emit POST: loop.emit span and latency histogramgenai-otel-bridge · GOB-0004Self-APM: remaining span coverage (loop.commit, logs_export steps, httpx, election)genai-otel-bridge · GOB-0005httpx SSRF: close the proxy-path DNS-rebinding residualgenai-otel-bridge · GOB-0006source_capability{state} — 6-state attribution metric