Search results

R8 for the Windows installer: install.ps1 still pulls from a mutable branch, unverified (RFC-0001 R8 — Windows)

Status: Open.

#283 In tracebloc/client;

· saadqbal opened on Jun 25, 2026

Branch-protect the R8 release trust root: CODEOWNERS + protected v* tags (RFC-0001 R8 follow-up #4)

Status: Open.

#282 In tracebloc/client;

· saadqbal opened on Jun 25, 2026

bug: dataset rm cannot delete staging files — ingestor (uid 65534) vs jobs-manager uid mismatch, no shared fsGroup

bugSomething isn't workingSomething isn't working

needs-refinementNeeds PO/lead refinement before moving to ReadyNeeds PO/lead refinement before moving to Ready

work-type:bugDefect or regressionDefect or regression

Status: Open.

#259 In tracebloc/client;

· saadqbal opened on Jun 15, 2026

ops(runbook): drain + sequencing procedure for flipping/rolling back the §8.2 egress lockdown

Status: Open.

#258 In tracebloc/client;

· saadqbal opened on Jun 15, 2026

docs(security): enforcementProbeHost must accept TCP :443 when egress is open (exit-7 false-pass caveat)

Status: Open.

#257 In tracebloc/client;

· saadqbal opened on Jun 15, 2026

ops(dev): enable VPC CNI NetworkPolicy on tb-client-dev-templates + audit EKS fleets [#102 prerequisite]

Status: Open.

#249 In tracebloc/client;

· saadqbal opened on Jun 11, 2026

docs(security): EKS VPC-CNI NetworkPolicy is a §8.2 lockdown prerequisite + per-fleet egress pre-flight

Status: Open.

#248 In tracebloc/client;

· saadqbal opened on Jun 11, 2026

fix(#229): jobs-manager re-emits NO_PROXY unmerged for proxy customers

Status: Open.

#236 In tracebloc/client;

· saadqbal opened on Jun 9, 2026

setup-linux.bats: 2 install_docker_engine tests fail on macOS dev hosts (un-mockable /etc/os-release file-test)

Status: Open.

#232 In tracebloc/client;

· saadqbal opened on Jun 9, 2026

ci(drift): cross-repo guards — docs selectors ↔ chart labels; preflight thresholds ↔ docs sizing

Status: Open.

#220 In tracebloc/client;

· saadqbal opened on Jun 8, 2026

ci(drift): promote Source-of-truth drift to a required status check

Status: Open.

#219 In tracebloc/client;

· saadqbal opened on Jun 8, 2026

Wire POD_TOKEN_SIGNING_SECRET into jobs-manager + requests-proxy (stateless tokens, client-runtime#79)

Status: Open.

#204 In tracebloc/client;

· saadqbal opened on Jun 4, 2026