Issues

[cadence 5d58b44c4d56460d] The replay assertion does not exercise the production replay path, which supplies no Issue.

jcrenshaw-dev/baley#286 · opened

on Oct 19, 2026

[cadence 2dc14120426384fc] Lossy UTF-8 decoding can collapse a distinct tracked pathname onto the project-file pathname and suppress the required survey.

jcrenshaw-dev/baley#285 · opened

on Oct 19, 2026

[cadence e80304b59a024dd6] The test claiming to catch changes that move a story's priority cannot detect remove-and-append implementations of correction or reassignment.

jcrenshaw-dev/baley#281 · opened

on Oct 18, 2026

[cadence d4253b6d859add66] A phase declaration can move a story without removing it from its previous phase's story list.

jcrenshaw-dev/baley#280 · opened

on Oct 18, 2026

[cadence c8dac05915e0d4f0] The person-name validator accepts Unicode line and paragraph separators despite requiring a single-line name.

jcrenshaw-dev/baley#275 · opened

on Oct 14, 2026

[cadence 1724cb397880357f] Provider acknowledgements take the owner from a host-overridden policy, unlike scope approvals.

jcrenshaw-dev/baley#274 · opened

on Oct 14, 2026

[cadence 0a2dcd5569c37edc] Feeding the header through stdin keeps the key out of curl's arguments, but does not guarantee that it never appears in `ps`. The printed pipeline leaves exported credential

jcrenshaw-dev/baley#270 · opened

on Oct 13, 2026

[cadence a69eec8a692cc34d] The expanded API key is exposed by shell tracing because it is an argument to printf.

jcrenshaw-dev/baley#269 · opened

on Oct 13, 2026

[cadence 92e78bae44a8be6c] The tab-in-userinfo regression contains no tab and does not test the control-removal ordering it claims to protect.

jcrenshaw-dev/baley#267 · opened

on Oct 13, 2026

[cadence 3bf7d7d01363098a] This supposedly unchanged fixture contains redactable userinfo, so the new test necessarily fails.

jcrenshaw-dev/baley#266 · opened

on Oct 13, 2026

[cadence 7c2df53913e04ad1] Closing URL wrappers do not terminate the authority, allowing unrelated email text to be deleted.

jcrenshaw-dev/baley#264 · opened

on Oct 13, 2026

[cadence 17331cbc2d9e0ec1] A valid apostrophe in URL userinfo prevents credential redaction.

jcrenshaw-dev/baley#263 · opened

on Oct 13, 2026

[cadence 9585f6582284a392] Rerunning cannot complete a reviewer-list step that failed after replacing the global file.

jcrenshaw-dev/baley#255 · opened

on Oct 11, 2026

[cadence 133b62038aba2020] A host-file directory-sync failure is converted into success instead of stopping subsequent writes.

jcrenshaw-dev/baley#256 · opened

on Oct 11, 2026

[cadence 6b30928217b9e0a8] The no-write/no-store-open test bypasses the effectful command path, so it cannot detect the side effects its name promises to catch.

jcrenshaw-dev/baley#254 · opened

on Oct 10, 2026

[cadence a688ed06469433f8] The registration recheck does not bind the subsequent name-only removal to the entry that was checked.

jcrenshaw-dev/baley#251 · opened

on Oct 10, 2026

[cadence efc16575c48cd7d7] Withholding the new hook still removes a working recorded older hook.

jcrenshaw-dev/baley#252 · opened

on Oct 10, 2026

[cadence fe45540a65f87fa8] Finding 2 remains open: command substitution strips trailing newlines from readlink output, allowing a pre-existing directory symlink to pass the new ownership check.

jcrenshaw-dev/baley#249 · opened

on Oct 9, 2026

[cadence 5d460b82d951e01a] Checking only the staged file does not prevent a version-directory symlink from redirecting installation outside the versions folder.

jcrenshaw-dev/baley#248 · opened

on Oct 9, 2026

[cadence 77d6f0c7452b5617] The final staging move can overwrite a conflicting binary created after the existence check.

jcrenshaw-dev/baley#247 · opened

on Oct 9, 2026

[cadence badc7b8219fd8a72] Fix (4)'s durability guarantee is bypassed when retrying an incompletely synced staging publication.

jcrenshaw-dev/baley#246 · opened

on Oct 9, 2026

[cadence b25c3d18b7f63876] Fix (3)'s unconditional rollback can delete a newer owner replacement.

jcrenshaw-dev/baley#245 · opened

on Oct 9, 2026

[cadence 9608a041b9691a2d] Fix (2) still permits a stale claim holder to activate after lease takeover.

jcrenshaw-dev/baley#244 · opened

on Oct 9, 2026

[cadence 3ffd8e8f2bf6f4d4] Fix (1) checks the file owner's execute bit, not whether the installation user can execute the staged file.

jcrenshaw-dev/baley#243 · opened

on Oct 9, 2026

[cadence f06e40e0252d1e3d] The candidate is published and directory-synced before the displaced occupant is validated, allowing a conflicting activation to become durable without restoration.

jcrenshaw-dev/baley#242 · opened

on Oct 9, 2026

Navigation Menu

Repository navigation

Issues

[cadence 5d58b44c4d56460d] The replay assertion does not exercise the production replay path, which supplies no Issue.

[cadence 2dc14120426384fc] Lossy UTF-8 decoding can collapse a distinct tracked pathname onto the project-file pathname and suppress the required survey.

[cadence e80304b59a024dd6] The test claiming to catch changes that move a story's priority cannot detect remove-and-append implementations of correction or reassignment.

[cadence d4253b6d859add66] A phase declaration can move a story without removing it from its previous phase's story list.

[cadence c8dac05915e0d4f0] The person-name validator accepts Unicode line and paragraph separators despite requiring a single-line name.

[cadence 1724cb397880357f] Provider acknowledgements take the owner from a host-overridden policy, unlike scope approvals.

[cadence 0a2dcd5569c37edc] Feeding the header through stdin keeps the key out of curl's arguments, but does not guarantee that it never appears in `ps`. The printed pipeline leaves exported credential

[cadence a69eec8a692cc34d] The expanded API key is exposed by shell tracing because it is an argument to printf.

[cadence 92e78bae44a8be6c] The tab-in-userinfo regression contains no tab and does not test the control-removal ordering it claims to protect.

[cadence 3bf7d7d01363098a] This supposedly unchanged fixture contains redactable userinfo, so the new test necessarily fails.

[cadence 7c2df53913e04ad1] Closing URL wrappers do not terminate the authority, allowing unrelated email text to be deleted.

[cadence 17331cbc2d9e0ec1] A valid apostrophe in URL userinfo prevents credential redaction.

[cadence 9585f6582284a392] Rerunning cannot complete a reviewer-list step that failed after replacing the global file.

[cadence 133b62038aba2020] A host-file directory-sync failure is converted into success instead of stopping subsequent writes.

[cadence 6b30928217b9e0a8] The no-write/no-store-open test bypasses the effectful command path, so it cannot detect the side effects its name promises to catch.

[cadence a688ed06469433f8] The registration recheck does not bind the subsequent name-only removal to the entry that was checked.

[cadence efc16575c48cd7d7] Withholding the new hook still removes a working recorded older hook.

[cadence fe45540a65f87fa8] Finding 2 remains open: command substitution strips trailing newlines from readlink output, allowing a pre-existing directory symlink to pass the new ownership check.

[cadence 5d460b82d951e01a] Checking only the staged file does not prevent a version-directory symlink from redirecting installation outside the versions folder.

[cadence 77d6f0c7452b5617] The final staging move can overwrite a conflicting binary created after the existence check.

[cadence badc7b8219fd8a72] Fix (4)'s durability guarantee is bypassed when retrying an incompletely synced staging publication.

[cadence b25c3d18b7f63876] Fix (3)'s unconditional rollback can delete a newer owner replacement.

[cadence 9608a041b9691a2d] Fix (2) still permits a stale claim holder to activate after lease takeover.

[cadence 3ffd8e8f2bf6f4d4] Fix (1) checks the file owner's execute bit, not whether the installation user can execute the staged file.

[cadence f06e40e0252d1e3d] The candidate is published and directory-synced before the displaced occupant is validated, allowing a conflicting activation to become durable without restoration.