Issues

• feat(api): reject inverted range filters on list endpoints with 400

  apienhancement
  ericfitz/tmi#1051 · Filter by author ericfitz opened on Oct 8, 2026

• feat(api): reject inverted range filters on list endpoints with 400

  apienhancement
  ericfitz/tmi#1050 · Filter by author ericfitz opened on Oct 8, 2026

• chore(api): define one documented error-code vocabulary and make the server, spec and wiki match

  api
  ericfitz/tmi#1048 · Filter by author ericfitz opened on Oct 7, 2026

• chore: enforce format uuid on query parameters in the OpenAPI validator

  api
  ericfitz/tmi#1047 · Filter by author ericfitz opened on Oct 7, 2026

• fix: collaboration session participants list is always empty; spec describes it two ways

  apibug
  ericfitz/tmi#1046 · Filter by author ericfitz opened on Oct 7, 2026

• fix: collaboration session participants list is always empty; spec describes it two ways

  apibug
  ericfitz/tmi#1045 · Filter by author ericfitz opened on Oct 7, 2026

• test: TestWorkerProbe_ContractEndToEnd_Integration flakes in the full PG integration run

  bug
  ericfitz/tmi#1036 · Filter by author ericfitz opened on Oct 4, 2026

• fix(dev-env): dev-config restore fails on encrypted (ENC:v1:) settings values

  bug
  ericfitz/tmi#1033 · Filter by author ericfitz opened on Oct 4, 2026

• fix: close the sql.DB on NewGormDB failure paths

  buggo
  ericfitz/tmi#1025 · Filter by author ericfitz opened on Oct 3, 2026

• chore: vet markdown link and image destinations in the server sanitizer

  security
  ericfitz/tmi#1013 · Filter by author ericfitz opened on Oct 1, 2026

• test: run TestSettingsReEncryptAllOracleIntegration on a dedicated ADB schema

  ericfitz/tmi#1007 · Filter by author ericfitz opened on Sep 30, 2026

• chore: wire tmi-rotator CronJob for the Oracle image

  ericfitz/tmi#1004 · Filter by author ericfitz opened on Sep 30, 2026

• chore(dev): move k3s NodePort choices into .local config

  enhancement
  ericfitz/tmi#996 · Filter by author ericfitz opened on Sep 29, 2026

• fix(dev): make charlie the administrator on every fresh dev database

  bug
  ericfitz/tmi#994 · Filter by author ericfitz opened on Sep 29, 2026

• feat(nats): per-component subject permissions via verify_and_map

  enhancementsecurity
  ericfitz/tmi#990 · Filter by author ericfitz opened on Sep 29, 2026

• test: e2e platform harness host-side NATS clients need mTLS client certs

  enhancement
  ericfitz/tmi#989 · Filter by author ericfitz opened on Sep 29, 2026

• fix: controller-rendered worker Deployments can run stale :dev images on k3s

  bug
  ericfitz/tmi#988 · Filter by author ericfitz opened on Sep 29, 2026

• feat: encrypt webhook subscription secrets at rest and rotate the content-token key

  enhancementsecurity
  ericfitz/tmi#984 · Filter by author ericfitz opened on Sep 28, 2026

• feat(terraform): add CloudTrail, EKS audit, and auth-failure security alarms

  securitysize:M
  ericfitz/tmi#968 · Filter by author ericfitz opened on Sep 28, 2026

• chore: add automated rotation for high-value AWS secrets (DB, Redis, JWT, settings key)

  securitysize:L
  ericfitz/tmi#965 · Filter by author ericfitz opened on Sep 28, 2026
  1

• fix(devenv): make dev-up handle snapshot drift, settings overwrite, and port-forwards gracefully

  bug
  ericfitz/tmi#962 · Filter by author ericfitz opened on Sep 27, 2026

• feat: decouple the OpenAPI schema version from the server version

  apienhancement
  ericfitz/tmi#952 · Filter by author ericfitz opened on Sep 26, 2026

• fix: threat create and bulk create drop request metadata

  apibug
  ericfitz/tmi#944 · Filter by author ericfitz opened on Sep 23, 2026

• test(oracle): two workflow tests fail only in a full OCI integration run (constraint 400 on TM auth PUT; cc grant 401)

  bug
  ericfitz/tmi#940 · Filter by author ericfitz opened on Sep 23, 2026

• fix(devenv): dev-config restore fails on DB=oracle (dbtool built without -tags oracle)

  bug
  ericfitz/tmi#939 · Filter by author ericfitz opened on Sep 23, 2026