Issues

• A client cancel during SuspendActor lets a retry crash the actor mid-checkpoint

  agent-substrate/substrate#2394 · Filter by author ygao-g opened on Oct 9, 2026

• Fetch sandbox assets through the object-store plugin instead of atelet's storage client

  area/microVMarea/nodearea/securityarea/storagekind/feature
  agent-substrate/substrate#2385 · Filter by author ILLUM1N0X opened on Oct 9, 2026
  

• Use a preferred_fidelity's valie when golden snapshots is scheduled

  agent-substrate/substrate#2383 · Filter by author dberkov opened on Oct 9, 2026 · M3

• Share snapshot storage settings through an ate-storage-config ConfigMap/Secret

  area/storagekind/cleanup
  agent-substrate/substrate#2378 · Filter by author ILLUM1N0X opened on Oct 8, 2026

• gVisor kills sandboxes under load; ateom checkpoints the dead sandbox as healthy

  agent-substrate/substrate#2377 · Filter by author ygao-g opened on Oct 8, 2026

• [ateom-microvm]: enable virtio-balloon with free page reporting by default

  agent-substrate/substrate#2375 · Filter by author ajaysundark opened on Oct 8, 2026
  1

• Move plugin socket helpers out of internal/objectstoreplugin so ate-api-server stops linking the GCS/S3 SDKs

  area/storagekind/cleanup
  agent-substrate/substrate#2373 · Filter by author ILLUM1N0X opened on Oct 8, 2026

• Get and Delete request messages for singleton subresources should take a name field.

  area/apiarea/api-machinery
  Task

  agent-substrate/substrate#2363 · Filter by author juli4n opened on Oct 8, 2026
  1

• ateom: own ate.actor.stats.cpu.time so short activations are counted

  area/nodearea/observabilitykind/feature
  agent-substrate/substrate#2362 · Filter by author baizhenyu opened on Oct 8, 2026

• Configure egress access for golden snapshot preparation

  agent-substrate/substrate#2358 · Filter by author EItanya opened on Oct 8, 2026

• setup-gcp: bootstrap turns off an existing cluster's managed Filestore CSI driver

  agent-substrate/substrate#2357 · Filter by author mastersingh24 opened on Oct 8, 2026

• A crash leaves the actor's sandbox running on its worker; a gVisor re-host then loses track of it

  area/gvisorarea/observabilityarea/reliabilitykind/bugprio/P2
  agent-substrate/substrate#2355 · Filter by author baizhenyu opened on Oct 8, 2026

• [Step II] - replace onCommit with preferred_fidelity

  agent-substrate/substrate#2351 · Filter by author dberkov opened on Oct 8, 2026 · M3

• Global AccessPolicy should have a Delete method

  area/apiarea/api-machineryarea/identitykind/feature
  Feature

  agent-substrate/substrate#2349 · Filter by author juli4n opened on Oct 8, 2026
  

• Worker Self-reports Snapshot Compatibility

  area/apiarea/nodekind/feature
  agent-substrate/substrate#2348 · Filter by author zoez7 opened on Oct 8, 2026 · M3
  1

  

• CreateAccessPolicy store hard-codes "default" instead of storing the caller provided metadata.name

  area/api-machineryarea/identitykind/bug
  agent-substrate/substrate#2347 · Filter by author juli4n opened on Oct 8, 2026
  

• Scraped metric names differ from pushed metric names, so one dashboard cannot serve both paths

  area/observabilitykind/designkind/feature
  Feature

  agent-substrate/substrate#2343 · Filter by author JeffLuoo opened on Oct 8, 2026
  4

  

• setup-gcp: bootstrap deletes and recreates an existing cluster when its subnetwork, network, or Dataplane V2 setting differs

  area/dev-infrakind/bug
  agent-substrate/substrate#2341 · Filter by author mastersingh24 opened on Oct 8, 2026
  1

• [Bug]: CSI TLS examples use a server name missing from the certificate

  area/storagekind/docs
  agent-substrate/substrate#2339 · Filter by author ktsoator opened on Oct 8, 2026

• Per-actor, restore-time credential projection (SystemInfo credential data source) that never enters snapshots

  area/nodearea/securitykind/feature
  agent-substrate/substrate#2335 · Filter by author acherifi opened on Oct 8, 2026

• Egress gateway: HTTPS tunnels each hold a copy of the actor's SNI rules, causing increased memory usage at scale

  area/networkkind/bug
  agent-substrate/substrate#2324 · Filter by author yufan-su opened on Oct 8, 2026
  

• Route every ate-apiserver store write through an admission layer

  area/api-machinerykind/feature
  Task

  agent-substrate/substrate#2316 · Filter by author juli4n opened on Oct 7, 2026
  

• Actor, DNS and PEP contract(s)

  area/networkarea/securitykind/design
  agent-substrate/substrate#2313 · Filter by author LiorLieberman opened on Oct 7, 2026

• Store structural links during creation of resource instead of contextually via contextual tuples.

  area/api-machineryarea/securitykind/cleanup
  agent-substrate/substrate#2312 · Filter by author SHRUTI6991 opened on Oct 7, 2026 · M3
  

• atenet-router: duplicate ate-target-actor headers bypass upstream L7 RBAC / AuthzPolicy checks

  area/networkarea/securitykind/bug
  agent-substrate/substrate#2307 · Filter by author destijl opened on Oct 7, 2026 · M3