Issues

• [Conformance] Tool-call trace spans are dropped by a GenAI backend: no gen_ai.operation.name, span name is not execute_tool

  status:needs-triagetype:conformance
  GenAI-Security-Project/agent-control-standard#520 · Filter by author glanitcom opened on Nov 7, 2026

• Reference adapter follow-ups from the PR #22 review

  scope:in-focusstatus:accepted
  GenAI-Security-Project/agent-control-standard#509 · Filter by author rocklambros opened on Nov 5, 2026 · Reference adapters on main (Claude Code, Cursor, NAT)
  

• [Bug] Trace mapping leaves the session and message attributes underspecified

  status:acceptedtype:bugworkstream:spec
  GenAI-Security-Project/agent-control-standard#503 · Filter by author bar-capsule opened on Nov 5, 2026
  

• [Bug] Memory writes and reads carry no lineage across sessions, so stored untrusted content reads back as trusted recall

  GenAI-Security-Project/agent-control-standard#501 · Filter by author drk-ram opened on Nov 4, 2026
  1

• [Bug] The policy cannot see who sent a step

  status:needs-triagetype:bug
  GenAI-Security-Project/agent-control-standard#493 · Filter by author President opened on Nov 3, 2026

• [Bug] The Guardian denies a tool call when mapping.yaml names no argument for the tool

  status:needs-triagetype:bug
  GenAI-Security-Project/agent-control-standard#492 · Filter by author President opened on Nov 3, 2026

• [Bug] subagentStart accepts a spawn with no intent, a derivation that cites no parent, and a child session id equal to the parent's, and only inherit_subset has a capability ceiling

  GenAI-Security-Project/agent-control-standard#474 · Filter by author drk-ram opened on Nov 3, 2026

• [Bug] The egress annotator judges the first URL in a command, so an allowlisted URL in a header or option value hides the real destination

  GenAI-Security-Project/agent-control-standard#470 · Filter by author drk-ram opened on Nov 3, 2026

• [Bug] The reference Guardian allows a call whose policy-target argument is not a string, and redacts only the first output of a result

  GenAI-Security-Project/agent-control-standard#469 · Filter by author drk-ram opened on Nov 3, 2026

• [Bug] The Envelope Inspector prints terminal control bytes from the logs it tails, and any client of the Guardian endpoint can plant them

  GenAI-Security-Project/agent-control-standard#468 · Filter by author drk-ram opened on Nov 3, 2026

• [Conformance] The reference adapter can only send exit_status success or failure; a tool timeout after a partial effect arrives as failure

  status:needs-triagetype:conformance
  GenAI-Security-Project/agent-control-standard#466 · Filter by author AngeYobo opened on Nov 2, 2026

• [Proposal] Only promotions reach main, with single pull request promotion

  scope:in-focusstatus:acceptedtype:proposal
  GenAI-Security-Project/agent-control-standard#463 · Filter by author rocklambros opened on Nov 2, 2026 · Governance under OWASP
  

• [Bug] An asymmetric key_id has no defined binding to an identity, no publication, and no revocation

  priority:P2scope:in-focusstatus:acceptedtype:bugworkstream:spec
  GenAI-Security-Project/agent-control-standard#460 · Filter by author rocklambros opened on Nov 1, 2026 · Spec and docs fixes for v0.1
  1

  

• [Bug] handshake.json says an empty signature list means signatures are not required

  priority:P2scope:in-focusstatus:acceptedtype:bugworkstream:spec
  GenAI-Security-Project/agent-control-standard#459 · Filter by author rocklambros opened on Nov 1, 2026 · Spec and docs fixes for v0.1
  1

  

• [Proposal] Carry the service identity that executes an action

  priority:P2scope:in-focusstatus:acceptedtype:proposalworkstream:identity
  GenAI-Security-Project/agent-control-standard#458 · Filter by author rocklambros opened on Nov 1, 2026 · Spec and docs fixes for v0.1
  1

  

• [Proposal] Add Ed25519 to the signature algorithm registry

  scope:in-focusstatus:acceptedtype:proposalworkstream:spec
  GenAI-Security-Project/agent-control-standard#457 · Filter by author rocklambros opened on Nov 1, 2026 · Spec and docs fixes for v0.1
  1

  

• [Bug] A dependent action is not deferred, and exceeding the deferral limit has no defined outcome

  priority:P2scope:in-focusstatus:acceptedtype:bugworkstream:spec
  GenAI-Security-Project/agent-control-standard#456 · Filter by author rocklambros opened on Nov 1, 2026 · Spec and docs fixes for v0.1
  

• [Conformance] No ACS method carries an action identity, so an approval cannot be bound to what ran

  status:needs-triagetype:conformance
  GenAI-Security-Project/agent-control-standard#436 · Filter by author rocklambros opened on Nov 1, 2026
  2

• [Conformance] §6.4 does not say what a host does with a decision that arrives after the timeout

  status:needs-triagetype:conformance
  GenAI-Security-Project/agent-control-standard#435 · Filter by author rocklambros opened on Nov 1, 2026
  11

• Track the dogfooding scenarios no run has covered

  help wantedpriority:P2scope:deferredstatus:acceptedtype:conformanceworkstream:coding-agents
  GenAI-Security-Project/agent-control-standard#434 · Filter by author rocklambros opened on Nov 1, 2026
  3

• [Docs] The A2A page says must for a wire deferred to v0.2

  scope:in-focusstatus:acceptedtype:docsworkstream:docs
  GenAI-Security-Project/agent-control-standard#391 · Filter by author rocklambros opened on Oct 31, 2026 · Spec and docs fixes for v0.1
  

• [Docs] The ACS in Action example breaks the spec it demonstrates

  scope:in-focusstatus:acceptedtype:docsworkstream:docs
  GenAI-Security-Project/agent-control-standard#390 · Filter by author rocklambros opened on Oct 31, 2026 · Spec and docs fixes for v0.1
  

• [Docs] hooks.md payload summaries drift from the schemas

  scope:in-focusstatus:acceptedtype:docsworkstream:docs
  GenAI-Security-Project/agent-control-standard#389 · Filter by author rocklambros opened on Oct 31, 2026 · Spec and docs fixes for v0.1
  

• [Bug] The authentication mechanism "declared in handshake" has no handshake field

  scope:in-focusstatus:acceptedtype:bugworkstream:identity
  GenAI-Security-Project/agent-control-standard#388 · Filter by author rocklambros opened on Oct 31, 2026 · Spec and docs fixes for v0.1
  

• [Bug] ServerHello has no defined place for a signature

  scope:in-focusstatus:acceptedtype:bugworkstream:spec
  GenAI-Security-Project/agent-control-standard#387 · Filter by author rocklambros opened on Oct 31, 2026 · Spec and docs fixes for v0.1
  2