-
-
Notifications
You must be signed in to change notification settings - Fork 12
All issues
Issue creation is restricted in this repository
- #15 · rahuldass19 opened
on Dec 24, 2025 10 - #216 · rahuldass19 opened
on Jul 23, 2026 6
Issues
is:issue state:open
is:issue state:open
Search results
Phase 2: Implement Verification Context v1.0
architecturearchitecturearchitecturediagnosticsdiagnosticsdiagnosticsStatus: Open.#307 In QWED-AI/qwed-verification;Expose VerificationContext in SDK/API/CLI and QWED Security surface
architecturearchitecturearchitectureqwed securityqwed securityqwed securityStatus: Open.#306 In QWED-AI/qwed-verification;Map DiagnosticResult to VerificationContext (StatsVerifier first)
architecturearchitecturearchitecturediagnosticsdiagnosticsdiagnosticsqwed securityqwed securityqwed securityStatus: Open.#305 In QWED-AI/qwed-verification;[Enhancement]: Deterministic DataFrame schema validation for StatsVerifier (Pandera)
enhancementNew feature or requestNew feature or requestStatus: Open.#299 In QWED-AI/qwed-verification;[Architecture]: Deterministic Statistical Claim Evaluation for StatsVerifier
architecturearchitecturearchitecturediagnosticsdiagnosticsdiagnosticsqwed securityqwed securityqwed securityStatus: Open.#298 In QWED-AI/qwed-verification;Deterministic attestation issuance - remove time.time()/uuid.uuid4() defaults from create_attestation
architecturearchitecturearchitectureqwed securityqwed securityqwed securityTech-DebtTech-DebtTech-DebtStatus: Open.#250 In QWED-AI/qwed-verification;[Bug]: Workflow permissions overscoped, actions use mutable tags, npm publish lacks provenance — CI/CD supply chain hardening
bugSomething isn't workingSomething isn't workingqwed securityqwed securityqwed securityStatus: Open.#231 In QWED-AI/qwed-verification;[Bug]: /verify/stats CSV upload has no file-size or row-count limits — unbounded memory allocation leads to OOM
bugSomething isn't workingSomething isn't workingqwed securityqwed securityqwed securityStatus: Open.#230 In QWED-AI/qwed-verification;[Bug]: Community provider config manager accepts http:// for provider import — MITM can substitute malicious provider YAML
bugSomething isn't workingSomething isn't workingqwed securityqwed securityqwed securityStatus: Open.#229 In QWED-AI/qwed-verification;[Bug]: Redis connection URL (including password) logged at INFO level — credential exposure in logs
bugSomething isn't workingSomething isn't workingqwed securityqwed securityqwed securityStatus: Open.#228 In QWED-AI/qwed-verification;[Bug]: Auth endpoints have no rate limiting — unbounded brute-force, email enumeration, and registration spam
bugSomething isn't workingSomething isn't workingqwed securityqwed securityqwed securityStatus: Open.#226 In QWED-AI/qwed-verification;[Bug]: Provider exception messages leak endpoint URLs, deployment names, and request IDs to clients
bugSomething isn't workingSomething isn't workingqwed securityqwed securityqwed securityStatus: Open.#225 In QWED-AI/qwed-verification;