Issues

• Workload actors: design, decisions and tracking (ADR-062)

  enhancementsecurity
  tinylabscom/mvm#5544 · Filter by author auser opened on Nov 15, 2026
  1

• One durable execution epoch per workload

  enhancementsecurity
  tinylabscom/mvm#5543 · Filter by author auser opened on Nov 15, 2026

• Readback by workload, epoch and recipe in explain

  enhancementsecurity
  tinylabscom/mvm#5542 · Filter by author auser opened on Nov 15, 2026

• Epoch seal with completeness, dropped, suppressed and scrub outcome

  enhancementsecurity
  tinylabscom/mvm#5541 · Filter by author auser opened on Nov 15, 2026

• Recipe hash and an epoch.bound entry at admission

  enhancementsecurity
  tinylabscom/mvm#5540 · Filter by author auser opened on Nov 15, 2026

• Record flow decisions before responding; require a bound audit sink in preflight

  enhancementsecurity
  tinylabscom/mvm#5538 · Filter by author auser opened on Nov 15, 2026
  1

• One denial shape across lookup, connect and datagram

  enhancementsecurity
  tinylabscom/mvm#5539 · Filter by author auser opened on Nov 15, 2026

• Persistent Firecracker lifecycle owner: deferred past the demo (preserve the contract and model)

  tinylabscom/mvm#5522 · Filter by author auser opened on Nov 15, 2026

• Design a single launch entry point: one pipeline for every launch source (enum input)

  tinylabscom/mvm#5520 · Filter by author auser opened on Nov 15, 2026
  3

• Verify the signed release runtime once per launch, as one verification of the whole runtime set (design for approval)

  tinylabscom/mvm#5515 · Filter by author auser opened on Nov 15, 2026
  7

• Density: smaller machines by default, memory and CPU returned to the host, and a smaller virtualization layer

  tinylabscom/mvm#5510 · Filter by author auser opened on Nov 14, 2026
  11

• Merge queue stalled

  tinylabscom/mvm#5507 · Filter by author github-actions opened on Nov 14, 2026

• FlowMux registry keeps Closed entries for the whole session

  tinylabscom/mvm#5493 · Filter by author auser opened on Nov 14, 2026

• HvfVm::create leaks the VM and the GIC config when GIC creation fails

  tinylabscom/mvm#5492 · Filter by author auser opened on Nov 14, 2026

• hvf/standby: a standby parent with a negative pid is left running

  tinylabscom/mvm#5491 · Filter by author auser opened on Nov 14, 2026

• hvf_restore: await_restored leaves the supervisor running on a negative pid or a missing agent socket

  tinylabscom/mvm#5490 · Filter by author auser opened on Nov 14, 2026

• libkrun driver: killed boot-timeout child is never waited on

  tinylabscom/mvm#5489 · Filter by author auser opened on Nov 14, 2026

• HVF on a developer Mac: a launch spends 2 to 4 s in admission, overlay attach, initramfs attach and VMM creation before the guest starts (warm and cold)

  tinylabscom/mvm#5487 · Filter by author auser opened on Nov 14, 2026
  12

• Keep runtime tree and seed executable modes stable under restrictive umask

  tinylabscom/mvm#5480 · Filter by author Casey-allard opened on Nov 14, 2026

• Run explicit capture commands in the selected project directory

  tinylabscom/mvm#5479 · Filter by author Casey-allard opened on Nov 14, 2026
  1

• Stabilize connected-guest mailbox outbox timing test on Hetzner shard

  tinylabscom/mvm#5478 · Filter by author auser opened on Nov 14, 2026

• Fix aarch64 privileged console witness PTY EIO on child exit

  tinylabscom/mvm#5473 · Filter by author auser opened on Nov 13, 2026

• Compose local manifest CPU and memory defaults without widening authority

  tinylabscom/mvm#5472 · Filter by author auser opened on Nov 13, 2026

• HVF: two guests launched at once on a cold MVM_HOME, one fails to start (safe HVF rollback unconfirmed)

  tinylabscom/mvm#5471 · Filter by author auser opened on Nov 13, 2026
  3

• Integrate resource-holder epoch exclusion with host lifecycle ownership

  tinylabscom/mvm#5466 · Filter by author auser opened on Nov 13, 2026
  1