Issues

• Docs closure nightly RED

  getknext-dev/knext#2588 · Filter by author github-actions opened on Oct 23, 2026
  1

• [tech-debt] no test checks that @getknext/grpc's real ./runtime export resolves

  priority:P2
  getknext-dev/knext#2587 · Filter by author AhmedElBanna80 opened on Oct 22, 2026

• [security] scale-zero-pg static base-tier manifests: container-level restricted securityContext

  priority:P2security
  getknext-dev/knext#2586 · Filter by author AhmedElBanna80 opened on Oct 22, 2026

• [tech-debt] mutation-prove-2510-zone-token.mjs aborts 10/18 in the prover lane: zone-signer-glue test can't resolve @getknext/grpc/runtime from /tmp

  priority:P1
  getknext-dev/knext#2583 · Filter by author AhmedElBanna80 opened on Oct 22, 2026
  1

• [security] bump Go to 1.26.10 for GO-2026-6809 (crypto/x509) on integration/v2

  priority:P1security
  getknext-dev/knext#2567 · Filter by author AhmedElBanna80 opened on Oct 21, 2026
  1

• [design] revisit a Rust operator port after v2 GA (decision deferred)

  priority:P2
  getknext-dev/knext#2562 · Filter by author AhmedElBanna80 opened on Oct 21, 2026

• [tech-debt] image-pin claim guard: vocabulary and 'only' misses from the closing review

  priority:P2
  getknext-dev/knext#2559 · Filter by author AhmedElBanna80 opened on Oct 20, 2026

• [tech-debt] release-age: tighten SRI length, anchor repo spec, verify bun's real github: id format

  priority:P2security
  getknext-dev/knext#2558 · Filter by author AhmedElBanna80 opened on Oct 20, 2026

• Published install bundle does not apply cleanly on kind

  getknext-dev/knext#2552 · Filter by author github-actions opened on Oct 20, 2026
  1

• Mutation provers RED

  getknext-dev/knext#2551 · Filter by author github-actions opened on Oct 18, 2026
  3

• Compat weekly RED (vinext axis)

  getknext-dev/knext#2550 · Filter by author github-actions opened on Oct 18, 2026

• npm-publish v* tag ruleset protection drift RED

  getknext-dev/knext#2549 · Filter by author github-actions opened on Oct 18, 2026
  6

• File-manager platform e2e nightly RED

  getknext-dev/knext#2548 · Filter by author github-actions opened on Oct 18, 2026

• Shipped operator image digests carry 4 fixable HIGH CVEs (Go stdlib, x/net): re-release

  priority:P1security
  getknext-dev/knext#2541 · Filter by author AhmedElBanna80 opened on Oct 17, 2026
  1

• [security] Operator-rendered app and function pods lack runAsNonRoot, seccomp and capability drop (fails PSA restricted)

  priority:P2
  getknext-dev/knext#2530 · Filter by author AhmedElBanna80 opened on Oct 17, 2026 · v2.0

• Hosted runner loss on long prover legs (mutation-prover lane): leg 5/6 dies in mutation-prove-cdn-purge, not for length

  getknext-dev/knext#2529 · Filter by author AhmedElBanna80 opened on Oct 17, 2026
  1

• [tech-debt] compat-suite-workflow: assert the reporting tail by step name, not only by count

  priority:P2
  getknext-dev/knext#2527 · Filter by author AhmedElBanna80 opened on Oct 17, 2026 · v2.0

• OKE verification of the zone image pin (swap refused, no db-bind mount)

  getknext-dev/knext#2523 · Filter by author AhmedElBanna80 opened on Oct 17, 2026 · v2.0

• Zone's BackendBindings condition reads Bound for a function refused with BindingImageMismatch

  priority:P2
  getknext-dev/knext#2522 · Filter by author AhmedElBanna80 opened on Oct 17, 2026 · v2.0

• [tech-debt] Functions trust the zone's sub: decide whether to add a signed user assertion

  priority:P2
  getknext-dev/knext#2512 · Filter by author AhmedElBanna80 opened on Oct 17, 2026 · v2.0

• [tech-debt] Zone to function link: authenticate responses and encrypt the hop (mTLS / mesh)

  priority:P2
  getknext-dev/knext#2511 · Filter by author AhmedElBanna80 opened on Oct 17, 2026 · v2.0

• [tech-debt] BackendService: alert and doctor for unverified function Secrets

  priority:P2
  getknext-dev/knext#2508 · Filter by author AhmedElBanna80 opened on Oct 17, 2026 · v2.0

• ADR-0066 cites untracked .claude/plans files

  getknext-dev/knext#2505 · Filter by author AhmedElBanna80 opened on Oct 17, 2026 · v2.0

• [tech-debt] BackendService reconciler re-checks every function on every NextApp status write (uncached GET fan-out)

  priority:P2
  getknext-dev/knext#2501 · Filter by author AhmedElBanna80 opened on Oct 17, 2026 · v2.0

• [tech-debt] Operator write policy can be silently off (pre-1.30, renamed install, deleted): add a self-check

  priority:P2
  getknext-dev/knext#2500 · Filter by author AhmedElBanna80 opened on Oct 17, 2026 · v2.0