All pull requests

Pull requests

• feat(routing): separate orchestrator preference and specialist model plans (LOCUS-484)

  #150·jmsbooth opened Oct 26, 2026Member·

  ·
  7

• feat(models): availability-aware local Auto and gated model fallback (LOCUS-479/A)

  #148·jmsbooth opened Oct 26, 2026Member·

  ·
  5

• feat(planner): recover version-bound TaskPlan review on current main (LOCUS-460)

  #142·jmsbooth opened Oct 25, 2026Member·

  ·
  1

• LOCUS-472: real native Deep Agents + Codex CLI verified two-specialist flow

  #139·jmsbooth opened Oct 25, 2026Member·

  ·
  2

• docs(architecture): target Locus architecture and governed data flows

  #136·jmsbooth opened Oct 23, 2026Member·

  ·
  1

• feat(planner): authenticated server-scoped read-only TaskPlan preview API

  #126·jmsbooth opened Oct 17, 2026Member·5 tasks·

  ·
  1

• feat(planner): project version-bound TaskPlan previews without execution authority

  #125·jmsbooth opened Oct 17, 2026Member·4 tasks·

  ·
  4

• LOCUS-416: receipt-fenced MCP tool endpoint bound to Gateway child pod

  #121·jmsbooth opened Oct 14, 2026Member·

  ·
  3

• docs(design): publish Lattix design system and Locus v0.3.1 design baseline

  #120·jmsbooth opened Oct 14, 2026Member·

  ·
  28

• LOCUS-416: pin CLI binary and MCP grants to authenticated Gateway pod preflight

  #119·jmsbooth opened Oct 13, 2026Member·

  ·
  2

• LOCUS-416: fail-closed OpenCode V1/V2 CLI admission and event validation contracts

  #118·jmsbooth opened Oct 13, 2026Member·

  ·
  2

• LOCUS-440: bind one-use device proof to exact signed work-envelope intent

  #113·jmsbooth opened Oct 12, 2026Member·

  ·
  6

• LOCUS-440: one-use device-possession challenge bound to organization membership

  #112·jmsbooth opened Oct 12, 2026Member·

  ·
  1

• LOCUS-440: verify pinned-root Ed25519 organization membership assertions

  #111·jmsbooth opened Oct 12, 2026Member·

  ·
  6

• LOCUS-439: bound untrusted organization envelope decoding before admission

  #110·jmsbooth opened Oct 12, 2026Member·

  ·
  6

• LOCUS-433: require Docker seccomp syscall-deny baseline before admission

  #108·jmsbooth opened Oct 12, 2026Member·4 of 7 tasks·

  ·
  3

• LOCUS-433: protect credential and control subpaths in writable Docker mounts

  #107·jmsbooth opened Oct 12, 2026Member·5 of 8 tasks·

  ·
  27