Search results

[SECURITY] E5-6: Raw message content forwarded to webhooks unredacted — PII risk

backend

in-developCode is merged to develop, not yet on mainCode is merged to develop, not yet on main

P1

priority: high

security

Status: Open.

#1443 In OneStepAt4time/aegis;

· OneStepAt4time opened on Apr 8, 2026

[enhancement] E5-5: Missing notification channels — no Slack, email, or PagerDuty

backend

enhancementNew feature or requestNew feature or request

P2

priority: high

readyTriaged and ready for an agent to pick upTriaged and ready for an agent to pick up

Status: Open.

#1442 In OneStepAt4time/aegis;

· OneStepAt4time opened on Apr 8, 2026

[SECURITY] E5-4: Webhook payloads not signed — no X-Aegis-Signature header

backend

ci

in-developCode is merged to develop, not yet on mainCode is merged to develop, not yet on main

P1

priority: medium

security

Status: Open.

#1441 In OneStepAt4time/aegis;

· OneStepAt4time opened on Apr 8, 2026

[enhancement] E5-3: No published TypeScript client SDK — duplication between MCP and dashboard clients

backend

dashboard

enhancementNew feature or requestNew feature or request

mcp

P2

priority: medium

readyTriaged and ready for an agent to pick upTriaged and ready for an agent to pick up

Status: Open.

#1440 In OneStepAt4time/aegis;

· OneStepAt4time opened on Apr 8, 2026

[enhancement] E5-2: No API versioning headers — no deprecation path

backend

enhancementNew feature or requestNew feature or request

in-developCode is merged to develop, not yet on mainCode is merged to develop, not yet on main

P2

priority: medium

Status: Open.

#1439 In OneStepAt4time/aegis;

· OneStepAt4time opened on Apr 8, 2026

[enhancement] E5-1: No OpenAPI specification — no machine-readable contract

backend

ci

documentationImprovements or additions to documentationImprovements or additions to documentation

enhancementNew feature or requestNew feature or request

in-developCode is merged to develop, not yet on mainCode is merged to develop, not yet on main

P2

priority: high

Status: Open.

#1438 In OneStepAt4time/aegis;

· OneStepAt4time opened on Apr 8, 2026

[tests] E4-7: Coverage threshold 50% — too low for enterprise quality gate

ci

dashboard

priority: medium

readyTriaged and ready for an agent to pick upTriaged and ready for an agent to pick up

tests

Status: Open.

#1435 In OneStepAt4time/aegis;

· OneStepAt4time opened on Apr 8, 2026

[E2-3] API key expiry — compromised keys grant indefinite access

backend

P1

priority: medium

readyTriaged and ready for an agent to pick upTriaged and ready for an agent to pick up

security

Status: Open.

#1436 In OneStepAt4time/aegis;

· OneStepAt4time opened on Apr 8, 2026

·  

M-E2: Identity & Access

[bug] E4-6: TmuxCaptureCache has no eviction — dead session entries grow indefinitely

bugSomething isn't workingSomething isn't working

P2

readyTriaged and ready for an agent to pick upTriaged and ready for an agent to pick up

tmux

Status: Open.

#1433 In OneStepAt4time/aegis;

· OneStepAt4time opened on Apr 8, 2026

[E2-2] API key roles — admin/operator/viewer RBAC

backend

P1

priority: medium

readyTriaged and ready for an agent to pick upTriaged and ready for an agent to pick up

security

Status: Open.

#1432 In OneStepAt4time/aegis;

· OneStepAt4time opened on Apr 8, 2026

·  

M-E2: Identity & Access

[bug] E4-5: retryWithJitter has no default shouldRetry — auth failures retried

bugSomething isn't workingSomething isn't working

P2

priority: medium

readyTriaged and ready for an agent to pick upTriaged and ready for an agent to pick up

Status: Open.

#1430 In OneStepAt4time/aegis;

· OneStepAt4time opened on Apr 8, 2026

[E2-1] Session ownership model — any key can operate on any session

backend

in-developCode is merged to develop, not yet on mainCode is merged to develop, not yet on main

mcp

P1

priority: high

security

Status: Open.

#1429 In OneStepAt4time/aegis;

· OneStepAt4time opened on Apr 8, 2026

·  

M-E2: Identity & Access