Issues

• approval: the store refuses to create a request in any state but pending (AP-18 defence in depth)

  loop:proposedsecurity
  Felag-Engineering/relay#1259 · Filter by author rapp992 opened on Oct 30, 2026 · After MVP

• mcp: the selector schema text names tag: terms (stale node:/relay:-only wording)

  loop:in-progressloop:readysecurity
  Felag-Engineering/relay#1258 · Filter by author rapp992 opened on Oct 30, 2026 · MVP

• enrollment: relay init mints the first join string (EN-39)

  loop:readysecurity
  Felag-Engineering/relay#1257 · Filter by author rapp992 opened on Oct 30, 2026 · MVP

• console: no temporary password for an Account with a linked OAuth identity

  idea
  Felag-Engineering/relay#1230 · Filter by author rapp992 opened on Oct 28, 2026

• enrollment: clean up pre-#1158 relay: scope labels on upgrade, and finish the leftovers

  loop:proposedsecurity
  Felag-Engineering/relay#1201 · Filter by author rapp992 opened on Oct 27, 2026 · After MVP

• docs: relay:node-id and tag: write-path statements that are no longer true (GLOSSARY, selectors-and-labels, ADR-0020/0034/0050)

  documentationloop:needs-human
  Felag-Engineering/relay#1178 · Filter by author rapp992 opened on Oct 26, 2026

• spec: migrate query.md to the two-layer claim format

  documentation
  Felag-Engineering/relay#1177 · Filter by author rapp992 opened on Oct 26, 2026

• policy: a subtree deny for path arguments, so the default can deny key directories

  enhancementsecurity
  Felag-Engineering/relay#1116 · Filter by author rapp992 opened on Oct 21, 2026

• daemon-installation: maintainer scripts — first-install user, directories, Policy and env file; enable-only; purge deletes only what the package created

  loop:proposedsecurity
  Felag-Engineering/relay#1088 · Filter by author rapp992 opened on Oct 19, 2026

• daemon-installation: purge-then-reinstall drops the shipped deny-list once DI-36 composes policy.d fragments

  decisionsecurity
  Felag-Engineering/relay#1085 · Filter by author rapp992 opened on Oct 19, 2026

• Console: Fleet Policy facet is uncapped and dominates page size on large fleets

  console
  Felag-Engineering/relay#1081 · Filter by author rapp992 opened on Oct 19, 2026

• console: refuse self-reported hostnames that are lookalike copies of a Node ID

  loop:proposedsecurity
  Felag-Engineering/relay#1072 · Filter by author rapp992 opened on Oct 19, 2026 · After MVP

• console: hostname first on Activity, Job detail, approvals and the deny block needs a read-disclosure decision

  decisionloop:proposedsecurity
  Felag-Engineering/relay#1071 · Filter by author rapp992 opened on Oct 19, 2026 · After MVP

• audit: the audit outcome row carries the Policy pass and rule reference (split from #903)

  loop:proposedsecurity
  Felag-Engineering/relay#1059 · Filter by author rapp992 opened on Oct 19, 2026 · After MVP

• security(daemon-installation): the default Policy denies reading key.pem.tmp during identity rotation

  loop:readysecurity
  Felag-Engineering/relay#1056 · Filter by author rapp992 opened on Oct 18, 2026 · MVP
  2

• security(daemon-installation): the self-reference lint flags a Raw Exec rule that can read the daemon's secrets

  loop:needs-humanloop:proposedsecurity
  Felag-Engineering/relay#1055 · Filter by author rapp992 opened on Oct 18, 2026 · After MVP
  1

• console: Access resolves a subject Account's current name once the Account read is audited

  loop:proposedsecurity
  Felag-Engineering/relay#1051 · Filter by author rapp992 opened on Oct 18, 2026 · After MVP

• decision: an example Kubernetes deployment for the Relay server (and say plainly that the relay-daemon never runs in a pod)

  decision
  Felag-Engineering/relay#987 · Filter by author rapp992 opened on Oct 15, 2026

• decision: which registry publishes the Relay image — Docker Hub or ghcr.io — and align release.yml and the docs

  decision
  Felag-Engineering/relay#986 · Filter by author rapp992 opened on Oct 15, 2026

• surfaces: render control, invisible and bidirectional characters visibly wherever a slot value or Node output is shown to a human

  loop:proposedsecurity
  Felag-Engineering/relay#979 · Filter by author rapp992 opened on Oct 14, 2026

• decision: an untrusted-data envelope for Node output returned to an AI-agent (prompt-injection source)

  decisionloop:proposed
  Felag-Engineering/relay#980 · Filter by author rapp992 opened on Oct 14, 2026

• daemon(policy check): probe-based lint for Raw Exec allows that admit an interpreter or wrapper

  loop:proposedsecurity
  Felag-Engineering/relay#978 · Filter by author rapp992 opened on Oct 14, 2026

• daemon/fuzz: fuzz targets over relay-policy Policy loading and relay-ops Template/schema parsing

  Felag-Engineering/relay#960 · Filter by author rapp992 opened on Oct 9, 2026

• docs: repoint human-owned daemon path citations after the #889 workspace split

  Felag-Engineering/relay#959 · Filter by author rapp992 opened on Oct 9, 2026

• proto: split by concern, a stability header, proto/README.md with the deprecation rule

  loop:proposedsecurity
  Felag-Engineering/relay#907 · Filter by author rapp992 opened on Oct 6, 2026 · After MVP