All pull requests

Pull requests

• fix(agt-bridge): refuse a manifest bundle that disables policy

  status:needs-triage
  #519·aaronormerod opened Nov 6, 2026Collaborator·8 of 9 tasks·

  ·
  1

  2

• docs(inspect): make the CycloneDX and SPDX guides match format-mapping.json

  status:needs-triage
  #518·drk-ram opened Nov 6, 2026Collaborator·12 of 18 tasks·

  ·
  1

  2

• spec(hooks): stop requiring postCompact fields a sender cannot fill

  status:needs-triage
  #517·drk-ram opened Nov 6, 2026Collaborator·11 of 18 tasks·

  ·
  1

  2

• spec(hooks): carry lineage across sessions on memory writes and reads

  status:needs-triage
  #516·drk-ram opened Nov 6, 2026Collaborator·10 of 18 tasks·

  ·
  1

  1

• fix(guardian): judge every URL in a command at the egress annotator

  status:needs-triage
  #515·drk-ram opened Nov 6, 2026Collaborator·8 of 15 tasks·

  ·
  1

  1

• deps: bump @opencode-ai/plugin from 1.18.15 to 1.19.5 in /reference-implementations/agt

  dependencies
  #512·dependabot[bot] opened Nov 5, 2026Bot·

  ·

• deps: bump nvidia-nat-core from 1.7.0 to 1.9.0 in /adapters

  dependencies
  #511·dependabot[bot] opened Nov 5, 2026Bot·

  ·

• deps: bump pytest from 9.1.1 to 9.2.0

  dependencies
  #510·dependabot[bot] opened Nov 5, 2026Bot·

  ·

• ci: bump astral-sh/setup-uv from 9.0.0 to 10.3.3

  dependencies
  #508·dependabot[bot] opened Nov 5, 2026Bot·

  ·

• fix(guardian): keep the envelope log on after a value it cannot serialize

  status:needs-triage
  #504·drk-ram opened Nov 5, 2026Collaborator·6 of 15 tasks·

  ·
  1

  2

• Add an OpenClaw adapter

  #502·President opened Nov 4, 2026·8 tasks done·

  ·
  1

  9

• Require an intent and a ceiling on every subagentStart spawn

  status:needs-triage
  #500·drk-ram opened Nov 4, 2026Collaborator·10 of 18 tasks·

  ·
  1

  1

• Refuse non-string policy arguments and judge every result output in the reference Guardian

  status:needs-triage
  #499·drk-ram opened Nov 4, 2026Collaborator·6 of 15 tasks·

  ·
  1

  1

• Match the Hooks page's payload summaries to the schemas

  #498·Lrd0036 opened Nov 4, 2026Collaborator·15 of 16 tasks·

  ·
  1

  3

• Define defer/subscribe for DEFER resolution

  status:needs-triage
  #496·President opened Nov 4, 2026·19 of 27 tasks·

  ·
  3

• Carry the Guardian's reasoning in additionalContext at the Claude Code request gate

  status:needs-triage
  #475·esherman-credo opened Nov 3, 2026·9 of 15 tasks·

  ·
  6

• Escape terminal control characters in Inspector output

  status:needs-triage
  #473·drk-ram opened Nov 3, 2026Collaborator·6 of 15 tasks·

  ·
  1

  1

• fix(claude-code): read piped stdin with readFileSync so the hook shim cannot exit early on Windows

  status:needs-triage
  #467·drk-ram opened Nov 3, 2026Collaborator·8 of 15 tasks·

  ·
  1

  3

• fix(guardian): refuse quote-joined, upper-case and argument-masked egress URLs

  status:needs-triage
  #465·4ktLuffy opened Nov 2, 2026·5 of 15 tasks·

  ·
  1

  2

• Only promotions reach main, with single pull request promotion

  #464·rocklambros opened Nov 2, 2026Collaborator·10 tasks done·

  ·
  1

  1

• fix(agt): make Claude Code PreToolUse hook fail closed (Closes #376)

  status:needs-triage
  #462·iampelumiade opened Nov 1, 2026·

  ·
  1

  4

• Name owaspacs.org as the project's only site

  #443·rocklambros opened Nov 1, 2026Collaborator·11 tasks done·

  ·

• deps: bump mkdocs-material from 9.7.7 to 9.8.0 in the docs-toolchain group across 1 directory

  dependenciesstatus:needs-triage
  #405·dependabot[bot] opened Oct 31, 2026Bot·

  ·
  1

• Read the transport cause's runtime prefix in the posture test

  status:needs-triage
  #404·asw84 opened Oct 31, 2026·

  ·
  4

• ci: bump github/codeql-action/upload-sarif from 4.38.0 to 4.39.1

  dependenciesstatus:needs-triage
  #403·dependabot[bot] opened Oct 31, 2026Bot·

  ·
  2