2026-08-26 - 2026-09-02
Overview
2 Pull requests merged by 1 user
Merged
#302 State the UUID-is-the-credential rule as a rule (closes #301)
Merged
#111 Milestone 1.0.0: internet-facing readiness
3 Issues closed from 1 user
Closed
#304 SQLite concurrency: cache=shared, no busy_timeout, no WAL, unbounded pool — concurrent writers get SQLITE_BUSY, deliveries stick pending
Closed
#301 Document that the entrypoint UUID is the authentication and shared secrets are never used
Closed
#147 CI gate follow-ups: script/cibuild has drifted from the model script, and the status-rewrite context string is hardcoded
8 Issues created by 1 user
Opened
#303 Independent code audit
Opened
#304 SQLite concurrency: cache=shared, no busy_timeout, no WAL, unbounded pool — concurrent writers get SQLITE_BUSY, deliveries stick pending
Opened
#305 Notify drops tasks on full channel; pending deliveries only recover on process restart
Opened
#306 Circuit breaker half-open state busy-loops queued tasks with a DB write per spin
Opened
#307 WEBHOOKER_ENVIRONMENT defaults to dev, silently shipping insecure prod (no Secure cookies, CORS *)
Opened
#308 Listener bind failure leaves the process running with no listener instead of exiting non-zero
Opened
#309 SSRF blocking has no opt-out: cannot deliver to RFC1918/LAN targets — needs ALLOWED_TARGET_CIDRS
Opened
#310 Replay/redelivery does not exist and the UI shows no per-attempt results, despite README promises