Issues

• feat(auth): make access token validation failures actionable for deployers

  comp:middleware:authenhancementneeds triage
  opentdf/platform#4172 · Filter by author pflynn-virtru opened on Oct 6, 2026
  1

• Support extensible otdfctl configuration for downstream consumers

  opentdf/platform#4132 · Filter by author jrschumacher opened on Oct 2, 2026

• Add opt-in analytics sink for otdfctl command outcomes

  opentdf/platform#4133 · Filter by author jrschumacher opened on Oct 2, 2026

• otdfctl decrypt can emit partial stdout before a later segment fails

  opentdf/platform#4119 · Filter by author marythought opened on Sep 29, 2026

• Add a CLI health command for container health checks

  opentdf/platform#4105 · Filter by author mmaudet opened on Sep 27, 2026

• sdk: payload entry name is hardcoded to 0.payload; the spec's payload.url is never read

  opentdf/platform#4065 · Filter by author pflynn-virtru opened on Sep 16, 2026

• sdk: TDF reader trusts the unauthenticated manifest spec version to pick integrity digest encoding

  opentdf/platform#4059 · Filter by author pflynn-virtru opened on Sep 16, 2026
  1

• refactor(auth): share verification primitives between middleware and KAS

  opentdf/platform#4004 · Filter by author jrschumacher opened on Sep 7, 2026

• design(core): define caller, service, and delegated authority for internal calls

  opentdf/platform#4003 · Filter by author jrschumacher opened on Sep 7, 2026
  1

• test(core): define registration, well-known, and mixed-version SDK compatibility

  opentdf/platform#4002 · Filter by author jrschumacher opened on Sep 6, 2026

• feat(authz): expose entitlement cache refresh freshness and failure state

  opentdf/platform#4001 · Filter by author jrschumacher opened on Sep 6, 2026
  1

• test(core): lock down /healthz liveness and readiness compatibility

  opentdf/platform#4000 · Filter by author jrschumacher opened on Sep 6, 2026

• test(core): characterize config precedence, reload scope, and partial activation

  opentdf/platform#3999 · Filter by author jrschumacher opened on Sep 6, 2026

• test(core): verify authenticated audit principal across SDK, IPC, and remote hops

  opentdf/platform#3998 · Filter by author jrschumacher opened on Sep 6, 2026

• feat(core): add an additive error-return service registration path

  opentdf/platform#3997 · Filter by author jrschumacher opened on Sep 6, 2026

• Roadmap to OpenTDF v1

  opentdf/platform#3996 · Filter by author jrschumacher opened on Sep 6, 2026

• feat(core): introduce experimental IPC v2 while preserving SDK contracts

  opentdf/platform#3995 · Filter by author jrschumacher opened on Sep 6, 2026

• perf(core): add an opt-in uncompressed IPC v1 mode

  opentdf/platform#3994 · Filter by author jrschumacher opened on Sep 6, 2026

• feat(sdk): make SDK caches configurable with audit logging and central flush

  opentdf/platform#3916 · Filter by author eugenioenko opened on Aug 24, 2026

• fix(sdk): add mutex to kasKeyCache and kasAllowlistCache for concurrent safety

  opentdf/platform#3899 · Filter by author eugenioenko opened on Aug 19, 2026
  1

• feat(sdk): cache ListKeyAccessServers response during decryption

  opentdf/platform#3897 · Filter by author eugenioenko opened on Aug 19, 2026
  1

• spec: Decryption Flow doesn't mention the JWT encapsulation of the Rewrap request

  opentdf/platform#3877 · Filter by author EmberPlot opened on Aug 17, 2026

• KAS: func (p *Provider) Rewrap doesn't check the URL in KAOs

  opentdf/platform#3876 · Filter by author EmberPlot opened on Aug 17, 2026

• IsValidTdf: Expose Schema Validation Intensity as a Parameter

  opentdf/platform#3869 · Filter by author Leaundrae opened on Aug 13, 2026

• feat(sdk): retry DPoP nonce challenges for streaming RPCs

  opentdf/platform#3868 · Filter by author coderabbitai opened on Aug 12, 2026