Issues

• The off-host backup cannot post because its sandbox leaves the Discord connector no writable home

  area: infrabug
  Nitjsefnie/Overflow#1106 · Filter by author Nitjsefnie opened on Oct 5, 2026
  2

  

• The off-host backup job reads a copy of the osc Discord token, so a token rotation silently breaks the nightly post

  area: infrabugoffered: small
  Nitjsefnie/Overflow#1105 · Filter by author Nitjsefnie opened on Oct 5, 2026
  2

  

• A deployment tree older than the required-checks manifest change cannot deploy any tip that carries the new shape

  area: infrabugoffered: small
  Nitjsefnie/Overflow#1104 · Filter by author Nitjsefnie opened on Oct 5, 2026

• A pull request can delete the workflow test that checks its own manifest's hashes

  area: infrabugoffered: medium
  Nitjsefnie/Overflow#1099 · Filter by author Nitjsefnie opened on Oct 5, 2026
  2

  

• A deleted moderator keeps the moderator role and counts as a surviving moderator for the last-moderator guard

  area: ledgerbugoffered: small
  Nitjsefnie/Overflow#1080 · Filter by author Nitjsefnie opened on Oct 5, 2026

• No record of processing or legitimate-interests balancing exists for the activities the notice bases on legitimate interests

  area: governancedocumentationoffered: small
  Nitjsefnie/Overflow#1078 · Filter by author Nitjsefnie opened on Oct 5, 2026
  1

• The shipped privacy notice and terms name the maintainer as controller on every self-hosted copy

  area: governancebugoffered: small
  Nitjsefnie/Overflow#1077 · Filter by author Nitjsefnie opened on Oct 5, 2026

• The incident runbook states a stale journal reach and has no procedure for telling affected people about a breach

  area: infradocumentationoffered: small
  Nitjsefnie/Overflow#1076 · Filter by author Nitjsefnie opened on Oct 5, 2026
  1

• The avatar URL is stored, exported and carried in the session although no feature uses it

  area: authenhancementoffered: small
  Nitjsefnie/Overflow#1075 · Filter by author Nitjsefnie opened on Oct 5, 2026
  1

• The privacy notice omits free-text records that survive deletion and IP addresses in mailed alert tails

  area: governancedocumentationoffered: small
  Nitjsefnie/Overflow#1074 · Filter by author Nitjsefnie opened on Oct 5, 2026
  1

• A person known only through GitLab has no channel to make a privacy request

  area: governancedocumentationoffered: small
  Nitjsefnie/Overflow#1073 · Filter by author Nitjsefnie opened on Oct 5, 2026

• A ban cannot be reversed in the product and silently stops settlement of the sponsor's repositories

  area: ledgerbugoffered: medium
  Nitjsefnie/Overflow#1072 · Filter by author Nitjsefnie opened on Oct 5, 2026

• Export, removal and objection requests about people who never signed in have no working procedure

  area: governancebugoffered: medium
  Nitjsefnie/Overflow#1071 · Filter by author Nitjsefnie opened on Oct 5, 2026

• Every test run publishes a PostgreSQL superuser with a committed password on all interfaces

  area: infrabugoffered: small
  Nitjsefnie/Overflow#1070 · Filter by author Nitjsefnie opened on Oct 5, 2026

• The interface does not declare its language scope and shows times in mixed unlabelled zones

  area: uienhancementoffered: small
  Nitjsefnie/Overflow#1069 · Filter by author Nitjsefnie opened on Oct 5, 2026

• The development quickstart serves the app on every interface and gives no removal step

  area: infradocumentationoffered: trivial
  Nitjsefnie/Overflow#1068 · Filter by author Nitjsefnie opened on Oct 5, 2026

• A long unbroken issue title widens the issues board by thousands of pixels and two pages do not reflow at 320 px

  area: uibugoffered: small
  Nitjsefnie/Overflow#1067 · Filter by author Nitjsefnie opened on Oct 5, 2026
  1

• A very large page value makes the issues board answer 502 UPSTREAM_FAILURE instead of an empty page

  area: infrabugoffered: trivial
  Nitjsefnie/Overflow#1066 · Filter by author Nitjsefnie opened on Oct 5, 2026

• The retention prune slows quadratically because reconciliation_changes has no index on its run foreign key

  area: infrabugoffered: small
  Nitjsefnie/Overflow#1065 · Filter by author Nitjsefnie opened on Oct 5, 2026

• Thirteen database tests in nine files pass only in declaration order

  area: infrabugoffered: medium
  Nitjsefnie/Overflow#1064 · Filter by author Nitjsefnie opened on Oct 5, 2026

• The SSRF deny-list tests skip on CI runners and the webhook HMAC tests accept a one-byte comparison

  area: infrabugoffered: small
  Nitjsefnie/Overflow#1063 · Filter by author Nitjsefnie opened on Oct 5, 2026
  2

  

• The build runs a Tailwind toolchain that changes nothing and five production functions are reached only by tests

  area: infraenhancementoffered: trivial
  Nitjsefnie/Overflow#1062 · Filter by author Nitjsefnie opened on Oct 5, 2026

• PostgresFoldStore is one 2707-line class owning six unrelated persistence concerns

  area: infraenhancementoffered: medium
  Nitjsefnie/Overflow#1061 · Filter by author Nitjsefnie opened on Oct 5, 2026

• The container image cannot run the documented operator procedures and the container route names no owner for backups or proxy

  area: infradocumentationoffered: small
  Nitjsefnie/Overflow#1060 · Filter by author Nitjsefnie opened on Oct 5, 2026

• The operator documents have no degraded-state map and do not state the reverse-proxy requirements the app depends on

  area: infradocumentationoffered: small
  Nitjsefnie/Overflow#1059 · Filter by author Nitjsefnie opened on Oct 5, 2026