Issues

Ship an app's frontend in its bundle and serve the matching version from the node

Feature

calimero-network/core#4580 · opened

on Oct 14, 2026

1

Agents (phase 8): owner-signed agent marker, and invitations that carry a role and capabilities

calimero-network/core#4562 · opened

on Oct 13, 2026

A Restricted→Open flip stalls the namespace DAG on every member outside the subgroup

calimero-network/core#4511 · opened

on Oct 6, 2026

An xcall queued by a delegated run executes over the node's real private store

calimero-network/core#4473 · opened

on Oct 4, 2026

At-cut role checks ignore deny lists and removal from an Open parent group

calimero-network/core#4464 · opened

on Oct 4, 2026

JSON-RPC execute: return a typed error when the node holds no owned identity for the context

calimero-network/core#4218 · opened

on Sep 29, 2026

storage: let a Registry's admins grant a chosen claimant

calimero-network/core#4217 · opened

on Sep 29, 2026

governance: read-only membership gaps (inherited ReadOnly not enforced, silent discards, no direct/inherited marker)

calimero-network/core#4216 · opened

on Sep 29, 2026

storage testing: Script and TestHost cannot share a test binary (ROOT_ID cached process-wide)

calimero-network/core#4206 · opened

on Sep 29, 2026

sync: a node restarted after a partition never reconverges through HashComparison

calimero-network/core#4205 · opened

on Sep 29, 2026

1

JS apps cannot read another owner's authored entry: no owner-qualified host functions

calimero-network/core#4165 · opened

on Sep 28, 2026

TEE timers skip ticks that pass while every TEE is down

calimero-network/core#4145 · opened

on Sep 27, 2026

TEE authority checks fall back to the op-log scan after a node's own governance op

calimero-network/core#4144 · opened

on Sep 27, 2026

TEE sealing: a device added to an account cannot open cards dealt before it joined

calimero-network/core#4143 · opened

on Sep 27, 2026

TEE trigger firing is at-least-once: a duplicate firing writes different random values

calimero-network/core#4142 · opened

on Sep 27, 2026

Namespace join gives up after 11s of its 45s discovery budget when the admitter has no address yet (DHT mode)

calimero-network/core#4137 · opened

on Sep 27, 2026

tee: the joining TEE picks its own attestation nonce, so admission proves no freshness

calimero-network/core#4066 · opened

on Sep 26, 2026

Scoped reads disagree on the refusal code: namespaces answer 404, contexts answer 403

calimero-network/core#4047 · opened

on Sep 24, 2026

Licence metadata and licence files disagree (Cargo.toml says MIT OR Apache-2.0; only the Apache text ships)

calimero-network/core#4044 · opened

on Sep 24, 2026

sync-resilience-network-partition-symmetric: asserting a log line is ABSENT makes DCUtR variance a red build on unrelated PRs

calimero-network/core#4035 · opened

on Sep 23, 2026

1

Blob fetch and upload sit on the admin surface, so a delegated client cannot reach them

calimero-network/core#4020 · opened

on Sep 22, 2026

1

Blob listing was left out of the caller scoping #3941 added, so a relay's blob ids are node-wide

calimero-network/core#4019 · opened

on Sep 22, 2026

1

Warrant-nonce discovery is admin-only, so delegated clients — the ones that need it — cannot reach it

calimero-network/core#4018 · opened

on Sep 22, 2026

3

Fleet HA: a TEE replica does not re-admit after disable → re-enable, leaving it participating but stateless

calimero-network/core#3997 · opened

on Sep 21, 2026

3

Follow-ups from the account-namespace stack (#3806)

calimero-network/core#3958 · opened

on Sep 16, 2026

Navigation Menu

Repository navigation

Issues

Ship an app's frontend in its bundle and serve the matching version from the node

Agents (phase 8): owner-signed agent marker, and invitations that carry a role and capabilities

A Restricted→Open flip stalls the namespace DAG on every member outside the subgroup

An xcall queued by a delegated run executes over the node's real private store

At-cut role checks ignore deny lists and removal from an Open parent group

JSON-RPC execute: return a typed error when the node holds no owned identity for the context

storage: let a Registry's admins grant a chosen claimant

governance: read-only membership gaps (inherited ReadOnly not enforced, silent discards, no direct/inherited marker)

storage testing: Script and TestHost cannot share a test binary (ROOT_ID cached process-wide)

sync: a node restarted after a partition never reconverges through HashComparison

JS apps cannot read another owner's authored entry: no owner-qualified host functions

TEE timers skip ticks that pass while every TEE is down

TEE authority checks fall back to the op-log scan after a node's own governance op

TEE sealing: a device added to an account cannot open cards dealt before it joined

TEE trigger firing is at-least-once: a duplicate firing writes different random values

Namespace join gives up after 11s of its 45s discovery budget when the admitter has no address yet (DHT mode)

tee: the joining TEE picks its own attestation nonce, so admission proves no freshness

Scoped reads disagree on the refusal code: namespaces answer 404, contexts answer 403

Licence metadata and licence files disagree (Cargo.toml says MIT OR Apache-2.0; only the Apache text ships)

sync-resilience-network-partition-symmetric: asserting a log line is ABSENT makes DCUtR variance a red build on unrelated PRs

Blob fetch and upload sit on the admin surface, so a delegated client cannot reach them

Blob listing was left out of the caller scoping #3941 added, so a relay's blob ids are node-wide

Warrant-nonce discovery is admin-only, so delegated clients — the ones that need it — cannot reach it

Fleet HA: a TEE replica does not re-admit after disable → re-enable, leaving it participating but stateless

Follow-ups from the account-namespace stack (#3806)