-
Notifications
You must be signed in to change notification settings - Fork 4
All issues
Issue creation is restricted in this repository
Issues
is:issue state:open
is:issue state:open
Search results
Security: bulk (multi) update/delete skips OWD owner scoping on private objects — members can modify others' rows
bugSomething isn't workingSomething isn't workingpriority:p2Medium: important, M3Medium: important, M3Status: Open.#2982 In objectstack-ai/framework;Security: Knowledge/RAG retrieval fall-opens to unfiltered corpus when ExecutionContext is missing or system — agent data ceiling escape
bugSomething isn't workingSomething isn't workingpriority:p1High: required for production / M2High: required for production / M2Status: Open.#2981 In objectstack-ai/framework;- Status: Open.#2978 In objectstack-ai/framework;
- Status: Open.#2977 In objectstack-ai/framework;
- Status: Open.#2974 In objectstack-ai/framework;
- Status: Open.#2970 In objectstack-ai/framework;
- Status: Open.#2926 In objectstack-ai/framework;
tracking(authz): 双轨赛道下的授权改进开发任务 v2（内核链 ADR 待编号 + 补齐轨 + 地基）
enhancementNew feature or requestNew feature or requestpriority:p2Medium: important, M3Medium: important, M3Status: Open.#2920 In objectstack-ai/framework;Audit sibling declared-metadata↔record two-store types (sys_position, sys_sharing_rule, sys_capability) per ADR-0094 addendum
enhancementNew feature or requestNew feature or requestStatus: Open.#2909 In objectstack-ai/framework;ADR-0089 D3a: flip
.strict()on view/page schemas so mis-layered visibility keys are loud errorspriority:p3Low: nice-to-have, backlogLow: nice-to-have, backlogStatus: Open.#2902 In objectstack-ai/framework;authz(D10): getReadFilter 缺 delegator 交集 — analytics read-scope 对 agent 上下文不与委托人 RLS 求交（原 Gap 2 /analytics/query 无 context 已修复）
bugSomething isn't workingSomething isn't workingpriority:p2Medium: important, M3Medium: important, M3Status: Open.#2852 In objectstack-ai/framework;Security: MCP action surface must gate on
ai.exposed— action bodies run trusted (unbounded RLS/FLS), so invoke-time is the only agent boundary (#2849)bugSomething isn't workingSomething isn't workingpriority:p1High: required for production / M2High: required for production / M2Status: Open.#2849 In objectstack-ai/framework;