v0.9.1 - agents and LLC

Open

No due date

•Last updated Oct 4, 2026

Agent coordination, peer messaging, authority on relay, resource contention, and the LLC scheduler. Ordered first: carries the most critical-tier work in the milestone.

14% complete

feat(llc): nothing detects a stalled agent run, so a dead run holds its claims forever
mrveiss/AutoBot-AI#16817 · opened on Sep 16, 2026 · v0.9.1 - agents and LLC
9
bug(llc): every CEO agent provisioned by 088 is unschedulable — heartbeat_enabled defaults false
mrveiss/AutoBot-AI#15907 · opened on Sep 7, 2026 · v0.9.1 - agents and LLC
12
security(agents): the generic HTTP tool blocklists six credential headers and not x-internal-api-key, which mints admin before any JWT check
mrveiss/AutoBot-AI#17662 · opened on Sep 27, 2026 · v0.9.1 - agents and LLC
1
feat(coordination): one claim registry for AutoBot and the dev agent sessions — the ledger's issue claims go through work_claims
mrveiss/AutoBot-AI#17098 · opened on Sep 19, 2026 · v0.9.1 - agents and LLC
1
long-running: the four start routes cannot create an operation — create_operation gets estimated_items/context it does not accept (TypeError → 500)
mrveiss/AutoBot-AI#17017 · opened on Sep 18, 2026 · v0.9.1 - agents and LLC
7
workflows: owner_id is never recorded, so workflow control cannot be scoped to its owner (REST control is open to any signed-in user)
mrveiss/AutoBot-AI#17014 · opened on Sep 18, 2026 · v0.9.1 - agents and LLC
7
AI_STACK peer-message drain only wired for the 'chat' role; 'rag'/'system_commands' silently lose messages
mrveiss/AutoBot-AI#16997 · opened on Sep 18, 2026 · v0.9.1 - agents and LLC
3
feat(agents): coordinate agents competing for shared resources — API limits, CPU time, queues
mrveiss/AutoBot-AI#16951 · opened on Sep 18, 2026 · v0.9.1 - agents and LLC
7
security(agents): an agent refused an action can get another agent to do it — no per-peer identity
mrveiss/AutoBot-AI#16950 · opened on Sep 18, 2026 · v0.9.1 - agents and LLC
11
feat(agents): deliver peer messages at the recipient's next turn, not mid-task
mrveiss/AutoBot-AI#16948 · opened on Sep 18, 2026 · v0.9.1 - agents and LLC
6
A node that falls behind drops buffered events silently — the SLM cannot see backlog or loss
mrveiss/AutoBot-AI#16056 · opened on Sep 8, 2026 · v0.9.1 - agents and LLC
3
fix(agent): pre-action verifier and belief state run nowhere — AgentLoop has no production caller
mrveiss/AutoBot-AI#14031 · opened on Aug 11, 2026 · v0.9.1 - agents and LLC
13
decide(llc): parent-company membership grants no access to child companies, while KB content already inherits down the same chain
mrveiss/AutoBot-AI#13992 · opened on Aug 11, 2026 · v0.9.1 - agents and LLC
2
security(tools): the LLM HTTP tool checks the domain allowlist then follows redirects unguarded
mrveiss/AutoBot-AI#17827 · opened on Sep 30, 2026 · v0.9.1 - agents and LLC
1
feat(llc): a project cannot have anyone assigned to it — no project-level membership exists on either side
mrveiss/AutoBot-AI#17682 · opened on Sep 28, 2026 · v0.9.1 - agents and LLC
1
bug(llc): projects can be created but not edited, deleted or assigned, and the project backlog shows the whole company
mrveiss/AutoBot-AI#17652 · opened on Sep 27, 2026 · v0.9.1 - agents and LLC
bug(llc): the KB context's sources answers tenancy, not where the document came from
mrveiss/AutoBot-AI#17618 · opened on Sep 27, 2026 · v0.9.1 - agents and LLC
fix(agent): verify high-specificity facts against the retrieved text before presenting them
mrveiss/AutoBot-AI#17507 · opened on Sep 25, 2026 · v0.9.1 - agents and LLC
bug(llc): work products carry no attribution, are unregistered in store_authority, and the workspace lease has no caller
mrveiss/AutoBot-AI#17496 · opened on Sep 25, 2026 · v0.9.1 - agents and LLC
security(llc): a confusable extension collapses the attachment basename, so two uploads overwrite each other
mrveiss/AutoBot-AI#17492 · opened on Sep 25, 2026 · v0.9.1 - agents and LLC
security(plugin-sdk): no namespace reservation — a community plugin can claim a core plugin's name, and only plugin_dirs ordering prevents the shadowing
mrveiss/AutoBot-AI#17460 · opened on Sep 25, 2026 · v0.9.1 - agents and LLC
security(plugin-sdk): plugin capabilities are declared and granted but never checked — CapabilityChecker.check() has no call sites, so /plugins/audit cannot be non-empty
mrveiss/AutoBot-AI#17459 · opened on Sep 25, 2026 · v0.9.1 - agents and LLC
2
security(llc): a work product's storage_path is confined to the LLC root but not to its own tenant, so a known UUID reads across companies
mrveiss/AutoBot-AI#17416 · opened on Sep 24, 2026 · v0.9.1 - agents and LLC
bug(a2a): the PII scrubber is told the task id where it expects the peer id, so every redaction audit attributes to a task instead of a peer
mrveiss/AutoBot-AI#17406 · opened on Sep 24, 2026 · v0.9.1 - agents and LLC
feat(agents): the dev-loop spend budget is checked, not reserved — concurrent actions can overshoot it
mrveiss/AutoBot-AI#17390 · opened on Sep 24, 2026 · v0.9.1 - agents and LLC

Navigation Menu

v0.9.1 - agents and LLC

feat(llc): nothing detects a stalled agent run, so a dead run holds its claims forever

bug(llc): every CEO agent provisioned by 088 is unschedulable — heartbeat_enabled defaults false

security(agents): the generic HTTP tool blocklists six credential headers and not `x-internal-api-key`, which mints admin before any JWT check

feat(coordination): one claim registry for AutoBot and the dev agent sessions — the ledger's issue claims go through work_claims

long-running: the four start routes cannot create an operation — create_operation gets estimated_items/context it does not accept (TypeError → 500)

workflows: owner_id is never recorded, so workflow control cannot be scoped to its owner (REST control is open to any signed-in user)

AI_STACK peer-message drain only wired for the 'chat' role; 'rag'/'system_commands' silently lose messages

feat(agents): coordinate agents competing for shared resources — API limits, CPU time, queues

security(agents): an agent refused an action can get another agent to do it — no per-peer identity

feat(agents): deliver peer messages at the recipient's next turn, not mid-task

A node that falls behind drops buffered events silently — the SLM cannot see backlog or loss

fix(agent): pre-action verifier and belief state run nowhere — AgentLoop has no production caller

decide(llc): parent-company membership grants no access to child companies, while KB content already inherits down the same chain

security(tools): the LLM HTTP tool checks the domain allowlist then follows redirects unguarded

feat(llc): a project cannot have anyone assigned to it — no project-level membership exists on either side

bug(llc): projects can be created but not edited, deleted or assigned, and the project backlog shows the whole company

bug(llc): the KB context's `sources` answers tenancy, not where the document came from

fix(agent): verify high-specificity facts against the retrieved text before presenting them

bug(llc): work products carry no attribution, are unregistered in store_authority, and the workspace lease has no caller

security(llc): a confusable extension collapses the attachment basename, so two uploads overwrite each other

security(plugin-sdk): no namespace reservation — a community plugin can claim a core plugin's name, and only `plugin_dirs` ordering prevents the shadowing

security(plugin-sdk): plugin capabilities are declared and granted but never checked — CapabilityChecker.check() has no call sites, so /plugins/audit cannot be non-empty

security(llc): a work product's storage_path is confined to the LLC root but not to its own tenant, so a known UUID reads across companies

bug(a2a): the PII scrubber is told the task id where it expects the peer id, so every redaction audit attributes to a task instead of a peer

feat(agents): the dev-loop spend budget is checked, not reserved — concurrent actions can overshoot it

Issues