Issues

• Limit: Python lockfile sha256 hashes are not checked in the gate

  akasecurity/oUpdate#24 · Filter by author alsoknownaswill opened on Oct 27, 2026

• Limit: yarn.lock, apt/OS packages and Mac App Store not covered

  akasecurity/oUpdate#23 · Filter by author alsoknownaswill opened on Oct 27, 2026

• Limit: not a package-manager hook; manual and agent installs bypass it

  akasecurity/oUpdate#22 · Filter by author alsoknownaswill opened on Oct 27, 2026

• Limit: advisory, cooldown, scanner and gate layers off in the eval

  akasecurity/oUpdate#21 · Filter by author alsoknownaswill opened on Oct 27, 2026

• Limit: many flags follow a partial read of a large diff

  akasecurity/oUpdate#20 · Filter by author alsoknownaswill opened on Oct 27, 2026

• Limit: false holds of 20-28% on clean releases

  akasecurity/oUpdate#19 · Filter by author alsoknownaswill opened on Oct 27, 2026

• Limit: single runs, not a detection rate

  akasecurity/oUpdate#18 · Filter by author alsoknownaswill opened on Oct 27, 2026

• Limit: latest totals are a replay, not a fresh run

  akasecurity/oUpdate#17 · Filter by author alsoknownaswill opened on Oct 27, 2026

• Limit: evaluation attacks are known and may be in training data

  akasecurity/oUpdate#16 · Filter by author alsoknownaswill opened on Oct 27, 2026

• Fill the test/port todo tests

  akasecurity/oUpdate#15 · Filter by author alsoknownaswill opened on Oct 27, 2026

• Split applyHost, break the kegs/owner-waiter import cycle, move shared review code

  akasecurity/oUpdate#14 · Filter by author alsoknownaswill opened on Oct 27, 2026

• oupdate image: read layer contents, not only history

  akasecurity/oUpdate#13 · Filter by author alsoknownaswill opened on Oct 27, 2026

• Reviewer settings: reject unknown keys

  akasecurity/oUpdate#12 · Filter by author alsoknownaswill opened on Oct 27, 2026

• Signed release tags, pinned Bun version and public CI

  akasecurity/oUpdate#11 · Filter by author alsoknownaswill opened on Oct 27, 2026
  2