Issues - hyperguild - Gitea: Git with a cup of tea

mathias/hyperguild

Labels Milestones New Issue

chore(context): restore the root rules in AGENTS.md and system-prompt.txt (project-only since 10-08) risk/low type/chore

by mathias was closed 2026-10-09 06:02:43 +00:00

symlinkguard: Watch alert-queue tests flake under -race and CPU load

by mathias was closed 2026-10-05 21:33:56 +00:00

brain_write follows a symlinked wing directory, including one that points outside the brain risk/high

by mathias was closed 2026-10-05 21:25:54 +00:00

ingestion metrics: an authenticated request to an unregistered path is labelled with the raw URL path (unbounded series)

by mathias was closed 2026-10-05 21:42:48 +00:00

symlinkguard ignores FIFOs and other special files: a planted FIFO classification.yaml crash-loops the pod

by mathias was closed 2026-10-05 21:15:57 +00:00

brain_write loses the learning when any subdirectory under knowledge/ or wiki/ is unreadable

by mathias was closed 2026-10-05 21:16:04 +00:00

brainfstest: swap-race asserts can pass vacuously (no read/iteration floor, swallowed Query errors)

by mathias was closed 2026-10-05 07:32:27 +00:00

DetectTunnels blocks on a FIFO under wiki/, hanging brain_update and brain_write risk/medium

by mathias was closed 2026-10-05 20:12:45 +00:00

Writes follow a static intermediate in-brain directory symlink (brain_update, brain_tunnel, session_log) risk/high

by mathias was closed 2026-10-05 20:17:37 +00:00

#157 slices 1–3: per-caller tests with in-brain symlink targets (search, hydrate, vectorstore, context excerpt, ReadNote) risk/high

by mathias was closed 2026-10-05 19:36:31 +00:00

brain_tunnel: path traversal lets an MCP token holder rewrite any file the pod can write risk/high

by mathias was closed 2026-10-05 18:47:07 +00:00

symlinkguard: a hung ntfy delays symlink removal (alert flush runs in the scan goroutine)

by mathias was closed 2026-10-05 14:48:16 +00:00

ntfy notifier hard-codes the title "brain-capture audit degraded" for every alert risk/low size/xs type/fix

by mathias was closed 2026-10-05 21:28:40 +00:00

test(ingestion): raw swap-race tests do not join the swapper goroutine; TempDir cleanup flakes CI

by mathias was closed 2026-10-03 19:46:19 +00:00

SECURITY: symlinks anywhere in the Syncthing-shared brain dir are followed by search, vectorstore, context and graph readers risk/high size/m type/fix

by mathias was closed 2026-10-05 20:17:47 +00:00

ingestion pins mcp-chassis v0.2.0: auth rejections aren't logged; REST metrics collapse to path="/" risk/low size/s type/fix

by mathias was closed 2026-10-05 14:40:21 +00:00

Test that /mcp authenticates through the production router; close the re-wrap gap in main.go risk/low size/s type/test

by mathias was closed 2026-10-05 17:48:44 +00:00

brain/raw/ readers follow symlinks (pending, promote); raw/ is writable via Syncthing risk/medium size/m type/fix

by mathias was closed 2026-10-03 15:32:34 +00:00

SECURITY: ingestion REST routes have no in-process auth; brain_ingest/ingest-path read any server file risk/high size/m type/fix

by mathias was closed 2026-10-03 14:38:07 +00:00

brain_write is an ungated persistent prompt-injection path into every future session (OWASP MCP06) risk/medium size/m status:dispatch type/research

by mathias was closed 2026-10-01 21:06:36 +00:00

1 2 3 4 5 ...