Issues

• fix(ci): bound Mermaid container cleanup after renderer failure

  gyldlab/keld#705 · Filter by author 0monish opened on Oct 11, 2026
  2

• test(host): distinguish Windows renderer beacon deadline phases

  gyldlab/keld#689 · Filter by author 0monish opened on Oct 10, 2026
  3

  

• fix(ci): route native filesystem binding inputs to TypeScript

  gyldlab/keld#683 · Filter by author 0monish opened on Oct 10, 2026
  2

  

• fix(ci): handle empty router options under macOS Bash 3.2

  gyldlab/keld#682 · Filter by author 0monish opened on Oct 10, 2026
  5

  

• docs(status): reflect the landed guarded filesystem host route

  gyldlab/keld#681 · Filter by author 0monish opened on Oct 10, 2026
  2

  

• test(native): bound Unix socket fixture paths under managed TMPDIR

  gyldlab/keld#680 · Filter by author 0monish opened on Oct 10, 2026
  5

  

• ci: run cargo-deny without Docker Hub pulls (unauthenticated rate limit failed CI)

  bugready-for-agent
  gyldlab/keld#676 · Filter by author 0monish opened on Oct 9, 2026
  2

  

• fix: restarted role intermittently fails to connect (KELD-IPC-001) and crash-loops after a window-phase kill (macOS)

  bugready-for-agent
  gyldlab/keld#674 · Filter by author 0monish opened on Oct 9, 2026
  3

  

• test(guard): run the OS-level '..' traversal-denial proof in CI, not only the ignored device test

  enhancementready-for-agent
  gyldlab/keld#673 · Filter by author 0monish opened on Oct 9, 2026
  3

  

• ci: router self-test temp repos race with detached git gc/maintenance on cleanup

  bugready-for-agent
  gyldlab/keld#670 · Filter by author 0monish opened on Oct 9, 2026
  2

  

• test(cli): bun_echo generated_main_launch_preserves_supplied_path_spelling flakes on its 2 s recorder bound under a full workspace run

  bug
  gyldlab/keld#669 · Filter by author 0monish opened on Oct 9, 2026
  5

  

• test(windows): intermittent CI failures in keld-host no_flag_windows dev_lifecycle and keld-wv dev-profile cleanup

  bugtriage
  gyldlab/keld#664 · Filter by author 0monish opened on Oct 9, 2026
  3

• test(compat): harness-run KEL-74 record producer for v1 showcase corpora

  electron-compatenhancementmilestone:first-proofneeds-specready-for-agent
  gyldlab/keld#663 · Filter by author 0monish opened on Oct 9, 2026
  3

• test(host): macOS real-pointer renderer roundtrip test flakes under a full workspace run

  bugready-for-agent
  gyldlab/keld#652 · Filter by author 0monish opened on Oct 8, 2026
  9

  

• spec(ipc): bound aggregate outbound buffering on the Bun role link (postMessage + WriteQueue)

  enhancementtriage
  gyldlab/keld#623 · Filter by author 0monish opened on Oct 7, 2026

• build: qualify Rust 1.99 while preserving MSRV 1.97.1

  gyldlab/keld#604 · Filter by author 0monish opened on Oct 7, 2026
  5

• task(perf): run the registered compat-overhead lanes on macOS — Electron arm vs Keld arm at a named SHA (parked)

  electron-compatenhancementmilestone:parkedtriage
  Task

  gyldlab/keld#596 · Filter by author 0monish opened on Oct 6, 2026
  1

• spec(security): runtime-minted filesystem path scopes under a frozen manifest: one contract for dialog-derived, OS-delivered and persisted user roots (strict profile only)

  compat:tier-2electron-compatenhancementmilestone:parkedtriage
  Task

  gyldlab/keld#595 · Filter by author 0monish opened on Oct 6, 2026
  1

• spec(guard): window-level web grants: windows.<w>.web.<name> evaluated for the registry-derived webview principal through the single windows reader, with a closed web capability vocabulary rejected at manifest load

  compat:tier-2electron-compatenhancementmilestone:nextready-for-agent
  Task

  gyldlab/keld#594 · Filter by author 0monish opened on Oct 6, 2026
  1

• feat(runtime): role spawn disables Bun auto-install so an unresolved electron fails closed instead of loading the install-cache npm package

  compat:tier-1electron-compatenhancementmilestone:nextneeds-specready-for-agent
  Feature

  gyldlab/keld#593 · Filter by author 0monish opened on Oct 6, 2026
  1

• feat(migrate): remaining analyzer blocker classes — native-addon evidence lookup, spawn/exec sites, custom-scheme privileges, dynamic openExternal, YAML builder configs and preload re-export following (Zettlr tranche)

  compat:tier-1electron-compatenhancementmilestone:nextneeds-specready-for-agent
  Feature

  gyldlab/keld#592 · Filter by author 0monish opened on Oct 6, 2026
  1

• feat(migrate): keld migrate --write generator — reproduces the X02-T3 artefact byte-for-byte and passes the X02-T6 activation cell with its own output

  compat:tier-1electron-compatenhancementmilestone:nextneeds-specready-for-agent
  Feature

  gyldlab/keld#591 · Filter by author 0monish opened on Oct 6, 2026
  1

• spec(migrate): analyzer scan rules — input discovery, import-binding-aware lexical scan, never-execute configs, parser dependency decisions, classification source, and four KEL-127 blocker classes

  compat:tier-1electron-compatenhancementmilestone:nextready-for-agent
  Task

  gyldlab/keld#590 · Filter by author 0monish opened on Oct 6, 2026
  1

• feat(corpus): first-proof scoring run — draw.io on a real Mac under explicit legacy, cells flipped to pass at named SHAs, claim line only after the corpus id is committed

  compat:tier-1electron-compatenhancementmilestone:first-proofneeds-infoneeds-spec
  Feature

  gyldlab/keld#589 · Filter by author 0monish opened on Oct 6, 2026
  2

• feat(guard): parse the explicit Keld legacy key into admit(Legacy), print the forfeit on build/doctor/scoreboard, and refuse records from undeclared apps

  compat:tier-1electron-compatenhancementmilestone:first-proofneeds-specready-for-agent
  Feature

  gyldlab/keld#588 · Filter by author 0monish opened on Oct 6, 2026
  1