All pull requests

Pull requests

• fix-forward #4035 (tsk-tjalxz): POST /api/memory/remember human/admin path must map a canonical agent id to its config agent before choosing the index

  needs-jay
  #4037·jaylfc opened Oct 30, 2026Owner·

  ·
  9

• execute_skill: a deployed agent's BOUND local token must also be limited to skills assigned to it (same guard as registry_jwt_deployed_agent)

  needs-jay
  #4036·jaylfc opened Oct 30, 2026Owner·

  ·
  3

• fix-forward #4034 (tsk-kglfxj): drop @pytest.mark.csrf_bypass from tests/test_memory_remember.py and send the CSRF header like the SPA

  merge-holdneeds-jay
  #4035·jaylfc opened Oct 29, 2026Owner·

  ·
  9

• fix-forward #4032 (tsk-quaat4): memory_remember registry-JWT branch must FAIL CLOSED when the config agent is missing or has no registry_canonical_id; real red proof from the shipped tests

  needs-jay
  #4034·jaylfc opened Oct 29, 2026Owner·

  ·
  11

• fix-forward #4029 (tsk-u55fee): POST /api/memory/remember must check agent ownership for human sessions and bind a registry JWT caller by registry_canonical_id, not display name

  needs-jay
  #4032·jaylfc opened Oct 29, 2026Owner·

  ·
  8

• fix-forward #4026 (tsk-jspgir): POST /api/memory/remember must refuse an empty or whitespace agent for admin/host callers (400 agent is required)

  merge-holdneeds-jay
  #4029·jaylfc opened Oct 29, 2026Owner·

  ·
  9

• fix-forward #4025 (tsk-5ohkbc): put memory_write in the scope vocabulary, flip its two tests, add changelog fragment + agent-coordination doc line

  needs-jay
  #4026·jaylfc opened Oct 29, 2026Owner·

  ·
  8

• memory: POST /api/memory/remember so agents can WRITE their own taOSmd memory + memory_write scope back in the vocabulary (recut 2/2 of tsk-lhbnd5)

  needs-jay
  #4025·jaylfc opened Oct 29, 2026Owner·

  ·
  7

• Orb catalog: refuse a non-firmware kind before the serial is recorded (catalog_fetch.py + catalog.load_catalog, spec s4.1 mirror case)

  needs-jay
  #4021·jaylfc opened Oct 28, 2026Owner·

  ·
  4

• bot-review-gate: rerun_failed_bot_review_runs.py reruns a CLOSED PR's failed run on a shared head SHA and repaints the open PR red; scope the selection to the PR number

  gate-integrity-allowneeds-jay
  #3999·jaylfc opened Oct 26, 2026Owner·

  ·
  6

• Orb catalog_fetch hardening: identity encoding, to_thread file I/O, bounded cached reads (#3965 deferred Minors)

  needs-jay
  #3975·jaylfc opened Oct 25, 2026Owner·

  ·
  3

• tsk-rbpexa: move the generic kiosk session layer from taOSmobile

  merge-hold
  #3968·jaylfc opened Oct 25, 2026Owner·

  ·
  20

• bot-review-gate: re-run-on-stub-comment exits 1 on HTTP 403 'This workflow is already running' and paints the master commit red; select completed runs + tolerate the race

  needs-jay
  #3959·jaylfc opened Oct 25, 2026Owner·

  ·
  5

• build(deps): bump the python-deps group across 1 directory with 52 updates

  dependenciespython:uv
  #3957·dependabot[bot] opened Oct 25, 2026Bot·

  ·

• build(deps): bump multidict from 6.7.1 to 6.9.1 in the uv group across 1 directory

  dependenciespython:uv
  #3927·dependabot[bot] opened Oct 23, 2026Bot·

  ·
  1

• fix(scripts): consume pip flag values in the licence drift gate

  #3828·hognek opened Oct 17, 2026Contributor·

  ·
  5

• docs(security): email security contact on master

  #3823·jaylfc opened Oct 17, 2026Owner·

  ·
  4

• feat(cluster): headless callers get full worker list on exempt GET (taOS #3227)

  #3790·hognek opened Oct 14, 2026Contributor·

  ·
  10

• fix(auth): reuse non-active agent identity instead of minting a new one (taOS #2114)

  #3789·hognek opened Oct 14, 2026Contributor·

  ·
  17

• fix(projects): auto-create A2A channel on all project creation paths (taOS #2115)

  #3788·hognek opened Oct 14, 2026Contributor·

  ·
  8

• feat(cluster): POST /api/cluster/tasks/report for external task outcomes (taOS #3233)

  #3787·hognek opened Oct 14, 2026Contributor·

  ·
  17

• feat(speech): asr/tts backend capability labels + worker manifest entries (taOS #3231)

  #3786·hognek opened Oct 14, 2026Contributor·

  ·
  4

• feat(hardware): detect AMD GPU under WSL2 via /dev/dxg + rocminfo (taOS #3228)

  #3785·hognek opened Oct 14, 2026Contributor·

  ·
  10

• feat(registry): model capability-registry schema fields (#146/#148 Phase 0)

  #3784·hognek opened Oct 14, 2026Contributor·

  ·
  11

• feat(library): doc format processors — docx, pptx, xlsx, epub (taOS #128 Phase 1)

  #3783·hognek opened Oct 14, 2026Contributor·

  ·
  15