Issues

• DSAR Erasure: Corruption Fixes + Web Feature Plan

  aryaminus/controlkeel#335 · Filter by author saragam-git opened on Nov 11, 2026
  1

  

• Follow up cloud execution guard: improve CLI errors and update authorization contracts

  aryaminus/controlkeel#333 · Filter by author saragam-git opened on Nov 10, 2026
  1

  

• Remove system-wide user disable; org-scoped revocation is the only admin verb

  aryaminus/controlkeel#328 · Filter by author saragam-git opened on Nov 8, 2026
  

• Org, Workspace, and Session Route Restructuring

  aryaminus/controlkeel#322 · Filter by author saragam-git opened on Nov 4, 2026
  

• Project isolation is broken: sessions, bindings, and databases leak across directories

  aryaminus/controlkeel#273 · Filter by author saragam-git opened on Oct 14, 2026
  1

• Cloud go-live: service-account token lifecycle — add expiry, enforced rotation, last-used policy, per-token revocation

  aryaminus/controlkeel#240 · Filter by author aryaminus opened on Oct 11, 2026

• Cloud go-live: bind/fail-close the API bootstrap+scope credential model (unscoped superuser, single scope choke point, fail-open fallback)

  aryaminus/controlkeel#239 · Filter by author aryaminus opened on Oct 11, 2026

• Web observability: remove duplicated/static recommendation cards, consolidate summary state into /observability/recommendations, move policy boilerplate to docs

  aryaminus/controlkeel#224 · Filter by author saragam-git opened on Oct 3, 2026
  

• CLI architecture: no identity, direct Postgres in remote modes, three audiences on one interface, --json declared 107 times and implemented 28

  aryaminus/controlkeel#148 · Filter by author aryaminus opened on Aug 31, 2026

• Capability placement: six surface gaps, four web features that belong elsewhere, and a parity check to keep them aligned

  aryaminus/controlkeel#147 · Filter by author aryaminus opened on Aug 31, 2026

• Tenancy is transitive-only on governance tables, and absent entirely from benchmarks and policy sets

  aryaminus/controlkeel#146 · Filter by author aryaminus opened on Aug 31, 2026

• Local stdio MCP bypasses the entire tool-authorization chain (tool policy, guardrails, scopes, audit log are hosted-only)

  aryaminus/controlkeel#145 · Filter by author aryaminus opened on Aug 31, 2026
  1

• EPIC: surface and scope architecture — human vs agent placement, entity tenancy, deployment modes, and the slice order

  aryaminus/controlkeel#144 · Filter by author aryaminus opened on Aug 31, 2026

• Surface alignment: entity vocabulary collisions, duplicate workspace surfaces, hosted-MCP tool parity, split scope vocabularies, CLI identity gap, API doc drift

  aryaminus/controlkeel#143 · Filter by author aryaminus opened on Aug 30, 2026
  1

• /api/v1 carries local-CLI trust assumptions onto the multi-tenant surface (open-by-default pipeline, unscoped bootstrap token, server-path writes, unauthorized task mutations)

  aryaminus/controlkeel#142 · Filter by author aryaminus opened on Aug 30, 2026
  1

• API endpoints lack token scoping and write-path re-verification (security)

  aryaminus/controlkeel#83 · Filter by author saragam-git opened on Aug 13, 2026
  4