Issues

• codeql.yml uses a bare commit the lock does not vouch for, and mislabels it as v4.38.0

  bugcicd
  hyperpolymath/hypatia#901 · Filter by author hyperpolymath opened on Oct 3, 2026

• config: fleet_path hardcodes ~/Documents/hyperpolymath-repos — make it configurable

  documentation
  hyperpolymath/hypatia#893 · Filter by author hyperpolymath opened on Sep 30, 2026

• eval_in_shell matches the word "eval" anywhere, not the builtin in command position

  hyperpolymath/hypatia#892 · Filter by author hyperpolymath opened on Sep 30, 2026
  1

• OWASP gap: no CWE-918 SSRF rule, no OWASP crosswalk, adapters ignore 429 and redirect policy

  hyperpolymath/hypatia#889 · Filter by author hyperpolymath opened on Sep 30, 2026

• GitGuardian: scanner test fixtures in test/scanner_suppression_test.exs red every PR (false positive, incident 37657201)

  testing
  hyperpolymath/hypatia#887 · Filter by author hyperpolymath opened on Sep 30, 2026

• ROADMAP: consolidated feature / RFC / design tracker

  enhancementmeta:roadmappriority:p3scope:repo
  hyperpolymath/hypatia#886 · Filter by author hyperpolymath opened on Sep 30, 2026

• actions.lock drift on main: dependabot bumps left 4 refs + codeql SHA unlocked (Actions lockfile verify red)

  cicdpriority:p0scope:repotech-debt
  hyperpolymath/hypatia#885 · Filter by author hyperpolymath opened on Sep 30, 2026

• estate: the verisimdb scan writer is outside hypatia — edges/rows/attacks array ordering must be fixed at ITS emit boundary (from #676)

  bugpriority:p2scope:repostatus:blocked
  hyperpolymath/hypatia#866 · Filter by author arena-ai-coding-agent opened on Sep 27, 2026

• secret_detected flags harvested reference material: path-based carve-out needed for harvested-registry/ (from #746 sample)

  priority:p2scope:reposecuritystatus:ready
  hyperpolymath/hypatia#865 · Filter by author arena-ai-coding-agent opened on Sep 27, 2026

• owner-gated: MUST.contractile:79 'Logtalk rule engine must be preserved' contradicts the retired engine (from #636 category C)

  priority:p1scope:repo
  hyperpolymath/hypatia#864 · Filter by author arena-ai-coding-agent opened on Sep 27, 2026
  1

• Mirror to Git Forges: 3 of 7 forges broken — Gitea's host variable expands to EMPTY, Disroot/Bitbucket keys rejected

  bugpriority:p2scope:repostatus:ready
  hyperpolymath/hypatia#845 · Filter by author hyperpolymath opened on Sep 22, 2026

• 🩺 CI-health: estate failure-class report

  bugcicdpriority:p3scope:estate
  hyperpolymath/hypatia#683 · Filter by author hyperpolymath opened on Aug 6, 2026
  1

• Scan output is non-deterministic: array ordering and language classification both flip between runs

  automationbugpriority:p2scope:repostatus:ready
  hyperpolymath/hypatia#676 · Filter by author hyperpolymath opened on Aug 5, 2026

• ci(estate): allowlist heal-then-wipe oscillation — off-tree wipe undoes the daily ci-health sweep

  cicdpriority:p1scope:estate
  hyperpolymath/hypatia#638 · Filter by author hyperpolymath opened on Jul 20, 2026
  1

• Ruleset gate-deadlock: Hypatia enforces structurally-unsatisfiable required checks (regenerate on every run)

  cicdcx/L3priority:p1scope:estatestatus:ready
  hyperpolymath/hypatia#585 · Filter by author hyperpolymath opened on Jul 6, 2026

• Estate scan lane builds again (post #553) — triage per-repo medium+ findings

  cicdpriority:p2scope:estatestatus:readytri/control
  hyperpolymath/hypatia#556 · Filter by author hyperpolymath opened on Jun 27, 2026
  1

• ops(scanner): clear rsr-template-repo CSA001/CSA003 meta-echoes — refresh deployed scanner + verify stale-alert closure (instance of #484)

  cicdpriority:p1scope:estatestatus:blocked
  hyperpolymath/hypatia#523 · Filter by author hyperpolymath opened on Jun 22, 2026

• ci(estate): consumers pinned to stale standards reusable SHAs — hypatia-scan (bad actions/cache pin) + governance staleness fail estate-wide

  cicdpriority:p1scope:estatestatus:blocked
  hyperpolymath/hypatia#520 · Filter by author hyperpolymath opened on Jun 21, 2026

• Hypatia PR check (Hypatia) must report on every PR, or be de-required

  cicdpriority:p1scope:estate
  hyperpolymath/hypatia#519 · Filter by author hyperpolymath opened on Jun 21, 2026
  1

• audit (needs-owner): rsr-template ↔ standards divergence

  conformancemeta:recurringpriority:p1scope:estate
  hyperpolymath/hypatia#485 · Filter by author hyperpolymath opened on Jun 14, 2026
  1

• [estate] audit Base ruleset across repos for unsatisfiable rules that force bypass merges

  cicdpriority:p1scope:estatestatus:readytri/control
  hyperpolymath/hypatia#473 · Filter by author hyperpolymath opened on Jun 13, 2026
  3

• ci(ruleset): re-add copilot_code_review + code_quality once those features produce PR results

  cicdpriority:p3scope:repostatus:blocked
  hyperpolymath/hypatia#471 · Filter by author hyperpolymath opened on Jun 13, 2026

• 🚩 PR-stewardship special cases (cross-owner / ARR / ruleset / dirty)

  chorepriority:p2scope:estatestatus:blockedtri/control
  hyperpolymath/hypatia#466 · Filter by author hyperpolymath opened on Jun 13, 2026

• 📜 Manual review queue: licence/security PRs (owner-only per policy)

  licensingpriority:p1scope:reposecuritystatus:blocked
  hyperpolymath/hypatia#465 · Filter by author hyperpolymath opened on Jun 13, 2026

• 🟠 Estate CI-health backlog: public repos with independently-red CI

  cicdpriority:p1scope:estatestatus:readytri/control
  hyperpolymath/hypatia#464 · Filter by author hyperpolymath opened on Jun 13, 2026
  5