Issues

• gitDiff duplicates cleanGitPath validation inline instead of reusing the helper

  enhancement
  loraldx/AniGate#61 · Filter by author loraldx opened on Jul 11, 2026

• Dead "operate" branch in workspaceAllows; preset-execution policy is only the inline copy in RunPreset

  enhancement
  loraldx/AniGate#60 · Filter by author loraldx opened on Jul 11, 2026

• Atomic-write helpers use a fixed <path>.tmp name with no per-record lock; concurrent writers can rename a torn temp file

  bug
  loraldx/AniGate#59 · Filter by author loraldx opened on Jul 11, 2026

• task.commit fingerprint CAS is a TOCTOU against a concurrently-started agent job

  bug
  loraldx/AniGate#58 · Filter by author loraldx opened on Jul 11, 2026

• Agent session has no turn-concurrency guard: concurrent message_send spawn two subprocesses in one worktree

  bug
  loraldx/AniGate#57 · Filter by author loraldx opened on Jul 11, 2026

• state_dir is writable through a workspace in the shipped configs, letting a Max caller forge tokens/records

  bug
  loraldx/AniGate#56 · Filter by author loraldx opened on Jul 11, 2026
  1

• taskChangeFingerprint parses git output via CombinedOutput; stderr warnings can cause false CAS rejections

  bug
  loraldx/AniGate#54 · Filter by author loraldx opened on Jul 11, 2026

• simpleUnifiedDiff emits hunk-header line counts that don't match the body (not a valid unified diff)

  bug
  loraldx/AniGate#53 · Filter by author loraldx opened on Jul 11, 2026

• Dead code: bounded runGit helper has no callers

  enhancement
  loraldx/AniGate#52 · Filter by author loraldx opened on Jul 11, 2026

• artifact.search silently stops on lines over 1 MiB and drops the scanner error

  bug
  loraldx/AniGate#51 · Filter by author loraldx opened on Jul 11, 2026

• reconcileInterruptedJobs runs on every Service construction, so a read-only 'tools' invocation corrupts a live server's jobs

  bug
  loraldx/AniGate#50 · Filter by author loraldx opened on Jul 11, 2026

• TaskRecord.State never leaves 'active' - project.lock_status reports permanent locks

  bug
  loraldx/AniGate#47 · Filter by author loraldx opened on Jul 11, 2026

• Generate docs/tools.md and docs/configuration.md from source

  documentation
  loraldx/AniGate#45 · Filter by author loraldx opened on Jul 11, 2026

• Enforce tool input schemas at dispatch time (zero-dep mini validator)

  enhancement
  loraldx/AniGate#44 · Filter by author loraldx opened on Jul 11, 2026

• Architectural hardening backlog: tamper-evidence, secrets, rate limiting, multi-user, metrics, tool-count duplication

  loraldx/AniGate#27 · Filter by author loraldx opened on Jul 6, 2026

• publish.pr_create / gh run with a stripped env and cannot authenticate out-of-the-box

  loraldx/AniGate#26 · Filter by author loraldx opened on Jul 6, 2026

• Synchronous tool calls longer than 30s cannot deliver a result over HTTP

  loraldx/AniGate#25 · Filter by author loraldx opened on Jul 6, 2026

• file.edit_apply optimistic-concurrency check is not atomic with the write

  loraldx/AniGate#24 · Filter by author loraldx opened on Jul 6, 2026

• validatePatchPaths is an incomplete parser (audit-facing path list not authoritative)

  loraldx/AniGate#23 · Filter by author loraldx opened on Jul 6, 2026

• Audit log and file-backed state have no rotation or GC (unbounded growth, full-file scans)

  loraldx/AniGate#22 · Filter by author loraldx opened on Jul 6, 2026

• context.health scores lifetime cumulative state and trends permanently to red

  loraldx/AniGate#21 · Filter by author loraldx opened on Jul 6, 2026

• Task worktrees are created outside the configured workspace boundary

  loraldx/AniGate#20 · Filter by author loraldx opened on Jul 6, 2026