Issues

• lint.yml + nightly.yml: move macos-latest legs to the fleet mac (mini-m4), retire the last GitHub-hosted runner

  paiml/forjar#723 · Filter by author noahgift opened on Oct 19, 2026

• ci: arch-neutral runs-on for clippy, msrv, file-health

  paiml/forjar#721 · Filter by author noahgift opened on Oct 18, 2026

• FJ-METAL-001: bare-metal netboot / USB parity spec

  documentationenhancement
  paiml/forjar#717 · Filter by author noahgift opened on Oct 17, 2026

• RUSTSEC-2024-0449: unsafe-libyaml (unmaintained) reds cargo deny check advisories on main

  paiml/forjar#714 · Filter by author noahgift opened on Oct 14, 2026 · 1.34.0

• bootstrap-usb resource: bootable_media — declared, linted, read-back-proven install sticks

  paiml/forjar#713 · Filter by author noahgift opened on Oct 14, 2026 · backlog

• migrate YAML to a maintained crate (serde-saphyr candidate) to drop the RUSTSEC-2024-0449 ignore

  paiml/forjar#712 · Filter by author noahgift opened on Oct 14, 2026 · backlog

• rustls 0.23.46 + quinn-proto 0.11.18 for RUSTSEC-2026-0346..0349/0338/0340/0343 (red-main lockfile fix)

  paiml/forjar#710 · Filter by author noahgift opened on Oct 14, 2026 · 1.34.0

• service state: stopped skips the stop when the unit is 'activating' (auto-restart) and records converged

  paiml/forjar#708 · Filter by author noahgift opened on Oct 14, 2026 · backlog

• default cli feature pulls pforge-runtime -> pforge-config -> serde_yaml -> unsafe-libyaml (RUSTSEC-2024-0449)

  paiml/forjar#707 · Filter by author noahgift opened on Oct 13, 2026 · backlog

• apply --dry-run plans 'no changes' for drift its own gate just observed; the real apply then repairs it (a dependency's apt full-upgrade, unpreviewed)

  paiml/forjar#704 · Filter by author noahgift opened on Oct 13, 2026 · backlog

• security audit red on main: 3 cargo-audit vulnerabilities (quinn-proto) + cargo-deny (unsafe-libyaml)

  paiml/forjar#703 · Filter by author noahgift opened on Oct 13, 2026 · 1.34.0

• bump bashrs to 7.4.2: I8 gate must lint infra's fw16-wired-10g-nm-owner completion_check with 0 errors (SC2075 FP, bashrs#441)

  paiml/forjar#698 · Filter by author noahgift opened on Oct 10, 2026 · 1.34.0

• Epic: forjar v1.35.0 (look-ahead) — secret/I8 cluster, gate B ratchet, Windows nightly

  epic
  paiml/forjar#697 · Filter by author noahgift opened on Oct 10, 2026 · 1.35.0

• Epic: forjar v1.34.0 — ship the window + bashrs 7.4.2, books current

  epic
  paiml/forjar#696 · Filter by author noahgift opened on Oct 10, 2026 · 1.34.0

• completion_check on a package resource is accepted and never run: the box is graded by dpkg/cargo --list instead

  paiml/forjar#694 · Filter by author noahgift opened on Oct 7, 2026 · 1.35.0

• CI enforces no per-function complexity limit, though the pre-commit hook says ci / gate does (#690 landed Cognitive 39 > 25)

  paiml/forjar#692 · Filter by author noahgift opened on Oct 6, 2026 · backlog

• nightly.yml: the release job has no ref guard — workflow_dispatch from any branch republishes it as nightly

  paiml/forjar#691 · Filter by author noahgift opened on Oct 6, 2026 · backlog

• Two stacks on one machine in one state dir: undo refuses both, and the re-stamp remedy it prints cannot help

  paiml/forjar#689 · Filter by author noahgift opened on Oct 6, 2026 · backlog

• A failed resource is recorded as action: converged in the run's meta.yaml (ResourceRunStatus has no failure variant)

  paiml/forjar#688 · Filter by author noahgift opened on Oct 6, 2026 · backlog

• Design: secrets reach the target by text substitution into the script, so every consumer of the script must redact them

  paiml/forjar#687 · Filter by author noahgift opened on Oct 6, 2026 · 1.35.0

• I8 gate lints the script after secret substitution: SEC005 refuses a secret passed correctly through {{secrets.*}}

  paiml/forjar#686 · Filter by author noahgift opened on Oct 6, 2026 · 1.35.0

• forjar lint and the quality gate silently skip the apply script of a resource that carries a secret reference

  paiml/forjar#685 · Filter by author noahgift opened on Oct 6, 2026 · backlog

• Secret printed and saved to state when the I8 script gate rejects a task

  paiml/forjar#679 · Filter by author Ujang360 opened on Oct 6, 2026 · 1.35.0
  1

• disk_budget: "target not met" is the same line and the same exit status whether a rule reached the bytes or none did

  paiml/forjar#678 · Filter by author noahgift opened on Oct 6, 2026 · backlog

• Stress Tests cannot pass: 10 single-threaded passes per leg never fit its 30-minute timeout

  paiml/forjar#673 · Filter by author noahgift opened on Oct 5, 2026 · backlog