| #31 |
TEST-1: Contract & Isolation Tests
Write tests mocking Auth, Mail, RunFlow with circuit-open behavior. Prove cross-tenant isolation and...
|
closed |
medium |
2026-07-22 21:59 |
- |
|
| #30 |
INT-1: RunFlow Binding Sync
Implement /v1/runflow/bindings CRUD. Map stage completions to RunFlow node_ref. Call RunFlow approve...
|
wont-do |
medium |
2026-07-22 21:59 |
- |
|
| #29 |
SEC-1: Redis Rate Limiting & API Security
Enforce per-tenant and per-key rate limits via Redis. Enforce 1MB max JSON body. Protect Webhooks ag...
|
closed |
medium |
2026-07-22 21:59 |
- |
|
| #28 |
API-7: Audit REST API & Event Logging
Implement /v1/audit read endpoint. Trigger audit events for decision lifecycle, actions, delegations...
|
closed |
medium |
2026-07-22 21:59 |
- |
|
| #18 |
AUDIT-1: Audit Logs & Quality Check
Ensure all state mutations correctly log to audit_events. Expose /v1/audit API. Final quality checks...
|
closed |
medium |
2026-07-22 21:09 |
- |
|
| #17 |
MCP-2: Reviewer MCP Server
Expose SSE MCP server with tools hitl_list_inbox, hitl_act_on_task.
Development Workflow:
1. Read t...
|
closed |
medium |
2026-07-22 21:09 |
- |
|
| #16 |
MCP-1: Submitter MCP Server
Expose SSE MCP server with tools hitl_request_decision, hitl_list_policies.
Development Workflow:
1...
|
closed |
medium |
2026-07-22 21:09 |
- |
|
| #15 |
RUNFLOW-1: RunFlow Adapter
Implement RunFlow bindings to call RunFlow approve/reject upon Decision terminal state.
Development...
|
wont-do |
medium |
2026-07-22 21:09 |
- |
|
| #14 |
WEBHOOK-1: Webhook Delivery System
Implement outbound webhooks with HMAC-SHA256 signing and retry policies (resilient_circuit).
Develo...
|
in-progress |
medium |
2026-07-22 21:09 |
- |
|
| #13 |
WORKER-1: SLA & Expiry Background Workers
Implement background jobs (Celery/RQ) to handle SLA escalation and hard expiries.
Development Workf...
|
closed |
medium |
2026-07-22 21:09 |
- |
|
| #12 |
WEB-2: Step-Up OTP via Mailserver
Implement OTP challenge via Action Web interacting with MAIL-1 client before task action execution.
...
|
closed |
medium |
2026-07-22 21:09 |
- |
|
| #11 |
WEB-1: Minimal Action Web Routes
Implement server-rendered Jinja2 UI for Review & Submit actions using one-click capability tokens.
...
|
closed |
medium |
2026-07-22 21:09 |
- |
|
| #10 |
API-5: Actions API
Implement /v1/tasks/{id}/actions for approve, reject, request_changes.
Development Workflow:
1. Rea...
|
closed |
medium |
2026-07-22 21:09 |
- |
|
| #9 |
API-4: Tasks & Inbox API
Implement /v1/inbox/tasks. Handle step evaluation, SoD (Separation of Duties), and assignment routin...
|
closed |
medium |
2026-07-22 21:09 |
- |
|
| #8 |
API-3: Decisions REST API
Implement /v1/decisions create/read. Handle idempotency, context hash, and policy snapshotting.
Dev...
|
closed |
medium |
2026-07-22 21:09 |
- |
|
| #7 |
API-2: Policies REST API & Validation
Implement /v1/policies. Validate JSONB definitions against the EARS Policy JSON Schema.
Development...
|
closed |
medium |
2026-07-22 21:09 |
- |
|
| #6 |
API-1: Tenants & Members REST API
Implement /v1/tenants and /v1/tenants/{id}/members endpoints with proper AuthZ checks.
Development ...
|
closed |
medium |
2026-07-22 21:09 |
- |
|
| #5 |
MAIL-1: Mailserver Integration
Implement mailserver client for transactional emails (OTP, assignments) using resilient_circuit.
De...
|
closed |
medium |
2026-07-22 21:09 |
- |
|
| #4 |
AUTH-1: Auth Integration & Redis Cache
Implement client for auth.rodmena.co.uk with resilient_circuit and bulkman. Add Redis caching for pe...
|
closed |
medium |
2026-07-22 21:09 |
- |
|
| #3 |
DB-1: PostgreSQL Schema & migretti Baseline
Create migretti migrations for Tenants, Policies, Decisions, Tasks, Actions, AuditEvents. Setup asyn...
|
closed |
medium |
2026-07-22 21:09 |
- |
|