All pull requests

Pull requests

• Migration 053: repair 044-046 objects on databases built by the archived api chain

  #237·PetrefiedThunder opened Oct 25, 2026Collaborator·

  ·
  3

• Receipts: sign enforcement_mode and gateway_build (migration 052)

  #236·PetrefiedThunder opened Oct 25, 2026Collaborator·

  ·
  5

• feat(scripts): read-only duplicate-under-new-key measurement (amw-ds)

  #235·PetrefiedThunder opened Oct 25, 2026Collaborator·

  ·
  28

• feat(migrations): port agent-middleware-api 047-050 (same revision ids) onto main's 046

  #234·PetrefiedThunder opened Oct 25, 2026Collaborator·

  ·
  11

• fix(mcp): derive deterministic retry key for unkeyed tools/call (SEL-484)

  #233·PetrefiedThunder opened Oct 25, 2026Collaborator·

  ·
  20

• fix(gateway): permit allowlist is checked before the tool registry (unknown tool → permit_tool_not_allowed)

  #232·PetrefiedThunder opened Oct 25, 2026Collaborator·

  ·
  6

• feat(gateway): stable refusal reason-code registry (pin + doc + scan tests)

  #231·PetrefiedThunder opened Oct 25, 2026Collaborator·

  ·
  12

• test(mcp): out-of-scope permit on standard /mcp refuses with permit_tool_not_allowed

  #230·PetrefiedThunder opened Oct 25, 2026Collaborator·

  ·
  5

• feat(mcp): server-minted permit per call (SEL-355 option A)

  #227·PetrefiedThunder opened Oct 25, 2026Collaborator·

  ·
  25

• fix(sdk): mcp serve forwards caller permit and idempotency key, surfaces denials (SEL-355, option B)

  #225·PetrefiedThunder opened Oct 25, 2026Collaborator·

  ·
  3

• chore: move remaining api.thisisatest.tech references to api.agentmiddleware.dev

  #222·PetrefiedThunder opened Oct 25, 2026Collaborator·

  ·
  12

• feat(mcp): advertise api.agentmiddleware.dev remote and link API key page

  #219·PetrefiedThunder opened Oct 25, 2026Collaborator·

  ·
  5

• fix(mcp): replay permit_wallet_mismatch 403 with signed denial receipt and details (SEL-482)

  #218·PetrefiedThunder opened Oct 25, 2026Collaborator·

  ·
  8

• Prove the refund amount in receipt evidence, not just its existence

  #214·PetrefiedThunder opened Oct 24, 2026Collaborator·9 of 10 tasks·

  ·
  1

• SEL-482: replay returns full refusal body (receipt + details)

  #213·PetrefiedThunder opened Oct 24, 2026Collaborator·

  ·
  8

• fix(gateway): carry the failure lab target safety fuse into the monorepo

  #207·PetrefiedThunder opened Oct 24, 2026Collaborator·10 tasks done·

  ·
  1

• Stabilize ACP checkout latency check in CI

  #206·PetrefiedThunder opened Oct 24, 2026Collaborator·

  ·
  1

• ops: GitHub organization runbook, settings scripts, grouped Dependabot, secret-scan base after the history rewrite

  #194·PetrefiedThunder opened Oct 24, 2026Collaborator·

  ·
  22

• [audit-high] Fix CrewAI sync bridge and fence legacy ungoverned factories

  #82·PetrefiedThunder opened Oct 9, 2026Collaborator·

  ·
  16

• [audit-high] Label simulated lab tooling and clarify ops copy

  #79·PetrefiedThunder opened Oct 9, 2026Collaborator·

  ·
  49

• [audit-high] TypeScript receipt check could approve a swapped claim

  #75·PetrefiedThunder opened Oct 9, 2026Collaborator·

  ·
  7

• [audit-high] Gateway core: loopback-bound debug auth, lazy service imports, honest OpenAPI servers

  #72·PetrefiedThunder opened Oct 9, 2026Collaborator·

  ·
  16

• [audit-high] Framework client called the wrong gateway routes

  #68·PetrefiedThunder opened Oct 9, 2026Collaborator·

  ·
  33

• [audit-high] permit retries collide or mint a permit for a call that cannot succeed

  #66·PetrefiedThunder opened Oct 9, 2026Collaborator·

  ·
  26

• [audit-high] Agent docs misstate wallet freeze, MCP errors, and who can call

  #63·PetrefiedThunder opened Oct 9, 2026Collaborator·

  ·
  10