Issues

• [P3] Three wizard dashboard insights reference inactive events

  posthog
  DobermanCore/Doberman-Core#789 · Filter by author github-actions opened on Oct 30, 2026

• [P2] fix(auth): Make the stale TOTP step-lock takeover atomic

  posthog
  DobermanCore/Doberman-Core#786 · Filter by author github-actions opened on Oct 27, 2026

• [P2] fix(rules): Escalate gitignored deletes in .gitkeep-anchored directories

  posthog
  DobermanCore/Doberman-Core#785 · Filter by author github-actions opened on Oct 27, 2026

• rules: the .gitkeep layout never escalates a gitignored delete

  level-6
  DobermanCore/Doberman-Core#782 · Filter by author fu351 opened on Oct 27, 2026

• auth: two processes can both take over a stale TOTP used-step lock

  level-5
  DobermanCore/Doberman-Core#781 · Filter by author fu351 opened on Oct 27, 2026

• [P2] fix(sinks): Log only the webhook host on WebhookAuditSink POST failures

  posthog
  DobermanCore/Doberman-Core#767 · Filter by author github-actions opened on Oct 19, 2026

• [P1] fix(rules): Catch HEAD, glob, mirror-config, and send-pack protected pushes

  posthog
  DobermanCore/Doberman-Core#766 · Filter by author github-actions opened on Oct 19, 2026

• [P2] feat(rules): Run dependency admission on dlx, bunx, uvx, and uv tool run

  posthog
  DobermanCore/Doberman-Core#765 · Filter by author github-actions opened on Oct 19, 2026

• rules: protected-branch push checks miss HEAD refspecs, globs, remote mirror config and send-pack

  enhancementlevel-6security
  DobermanCore/Doberman-Core#762 · Filter by author fu351 opened on Oct 18, 2026

• policy: a failed ledger write after an approved loosening still applies the change

  enhancementlevel-6security
  DobermanCore/Doberman-Core#761 · Filter by author fu351 opened on Oct 18, 2026

• rules: pnpm dlx, yarn dlx, bunx, uvx and uv tool run skip dependency admission

  enhancementlevel-5
  DobermanCore/Doberman-Core#760 · Filter by author fu351 opened on Oct 18, 2026

• policy: a corrupt policies.yaml lets an ungated save raise the approval TTL to 300

  buglevel-4security
  DobermanCore/Doberman-Core#759 · Filter by author fu351 opened on Oct 18, 2026
  1

• [P3] feat(observability): add coverage for telemetry_enabled

  posthog
  DobermanCore/Doberman-Core#698 · Filter by author github-actions opened on Sep 10, 2026

• [P2] Authorization outcomes are silent for active CLI traffic

  posthog
  DobermanCore/Doberman-Core#684 · Filter by author github-actions opened on Sep 8, 2026

• [P3] fix(web analytics): configure authorized URLs

  posthog
  DobermanCore/Doberman-Core#683 · Filter by author github-actions opened on Sep 8, 2026

• Score the hook-config scanner against the HookPry artifact set as an operator-supplied suite

  level-4roadmap
  DobermanCore/Doberman-Core#670 · Filter by author fu351 opened on Sep 7, 2026

• Optional injection-classifier detector extra for untrusted tool output (AUTH-capped)

  level-8roadmap
  DobermanCore/Doberman-Core#669 · Filter by author fu351 opened on Sep 7, 2026

• Wire BIPIA (email and table indirect prompt injection) as an operator-supplied external suite

  level-5roadmap
  DobermanCore/Doberman-Core#668 · Filter by author fu351 opened on Sep 7, 2026

• Hook ledger: record every lifecycle hook command the host runs and scan it with the shell rules

  level-7roadmap
  DobermanCore/Doberman-Core#667 · Filter by author fu351 opened on Sep 7, 2026

• rules: deleting tests from the shell (rm, git rm) passes with no check

  enhancementlevel-5
  DobermanCore/Doberman-Core#647 · Filter by author fu351 opened on Sep 6, 2026
  1

  

• rules: npx, npm exec and pipx run skip the dependency-admission check

  enhancementlevel-5
  DobermanCore/Doberman-Core#645 · Filter by author fu351 opened on Sep 6, 2026
  1

  

• benchmarks: follow-ups from the external suites run (RedCode-Exec, MSB, LLMail-Inject)

  enhancementlevel-6
  DobermanCore/Doberman-Core#644 · Filter by author fu351 opened on Sep 6, 2026

• engine: per-session circuit breaker, repeated BLOCKs or denials tighten the rest of the session

  enhancementlevel-7roadmap
  DobermanCore/Doberman-Core#643 · Filter by author fu351 opened on Sep 6, 2026

• engine: honeytoken tripwire, a planted credential whose use anywhere is a confirmatory BLOCK

  enhancementlevel-7roadmap
  DobermanCore/Doberman-Core#642 · Filter by author fu351 opened on Sep 6, 2026

• egress: DNS lookups can carry data out, and strict mode has no BLOCK for high-entropy egress

  enhancementlevel-7roadmap
  DobermanCore/Doberman-Core#641 · Filter by author fu351 opened on Sep 6, 2026