Issues

• docs(worker): stop calling the pre-TTL Governor shape deployed

  getsimpledirect/vinci-code-cli#71 · Filter by author thegeorgepu opened on Sep 7, 2026

• web_fetch SSRF: IPv4-mapped IPv6 branch is dead code, and redirects are followed without revalidation

  getsimpledirect/vinci-code-cli#60 · Filter by author thegeorgepu opened on Sep 5, 2026

• worker: bus terminal post disagrees with the evidence row for governed attempts (follow-up to #53)

  getsimpledirect/vinci-code-cli#54 · Filter by author thegeorgepu opened on Sep 3, 2026
  1

• A dispatch HOLD must name a human owner and an expiry — and must not be ambient state

  getsimpledirect/vinci-code-cli#42 · Filter by author thegeorgepu opened on Aug 30, 2026
  2

• containment-broker: six remaining findings from the #30 review (one fail-open of the same class as the seccomp bug)

  getsimpledirect/vinci-code-cli#36 · Filter by author thegeorgepu opened on Aug 29, 2026
  1

• containment-broker: a malformed attestation escapes validatePrelaunchAttestation as a bare TypeError instead of an enumerated refusal

  getsimpledirect/vinci-code-cli#35 · Filter by author thegeorgepu opened on Aug 29, 2026

• containment-broker: Buffer and plain-object payloads canonicalize identically, so a receipt substitutes for a different payload

  getsimpledirect/vinci-code-cli#34 · Filter by author thegeorgepu opened on Aug 29, 2026

• A retryable OpenRouter 402 (in_flight_budget_exhausted, Retry-After: 120) is classified as terminal out-of-credit

  getsimpledirect/vinci-code-cli#33 · Filter by author thegeorgepu opened on Aug 29, 2026
  5

• worker: refuse PRODUCED for an attempt whose output is not reachable from a pushed ref

  getsimpledirect/vinci-code-cli#29 · Filter by author thegeorgepu opened on Aug 29, 2026

• worker: harness stop that makes vinci exit 1 is recorded FAILED, not BLOCKED (precedence order)

  getsimpledirect/vinci-code-cli#27 · Filter by author thegeorgepu opened on Aug 29, 2026

• Unattended (-p) runs: verification action-reserve refuses git commit — the deliverable itself

  getsimpledirect/vinci-code-cli#6 · Filter by author thegeorgepu opened on Aug 27, 2026

• No automated versioning or changelog, and the commit convention is unenforced

  getsimpledirect/vinci-code-cli#2 · Filter by author ayushnaikccino opened on Aug 25, 2026