All pull requests

Pull requests

• fix(gateway): narrow the failure lab's registered upstream service

  #267·PetrefiedThunder opened Oct 30, 2026Collaborator·10 tasks done·

  ·
  2

• deps(py): bump ruff from 0.17.1 to 0.17.2 in /gateway in the python-minor-patch group across 1 directory

  dependenciespython
  #260·dependabot[bot] opened Oct 26, 2026Bot·

  ·
  1

• ci: bump astral-sh/setup-uv from 10.3.0 to 10.3.2 in the actions group

  dependenciesgithub_actions
  #259·dependabot[bot] opened Oct 26, 2026Bot·

  ·
  1

• feat(gateway): optional PostHog signup, identify and activation tracking (SEL-555)

  #245·PetrefiedThunder opened Oct 26, 2026Collaborator·

  ·
  54

• fix(mcp): stop leaking exception text from /mcp/tools/{id}/invoke

  #244·PetrefiedThunder opened Oct 26, 2026Collaborator·

  ·
  17

• fix(security): never print full partner API key in bootstrap script (code-scanning #13-#15)

  #243·PetrefiedThunder opened Oct 26, 2026Collaborator·

  ·
  35

• fix(mcp): derive deterministic retry key for unkeyed tools/call (SEL-498)

  #233·PetrefiedThunder opened Oct 25, 2026Collaborator·

  ·
  35

• fix(gateway): permit allowlist is checked before the tool registry (unknown tool → permit_tool_not_allowed)

  #232·PetrefiedThunder opened Oct 25, 2026Collaborator·

  ·
  42

• fix(sdk): mcp serve forwards caller permit and idempotency key, surfaces denials (SEL-355, option B)

  #225·PetrefiedThunder opened Oct 25, 2026Collaborator·

  ·
  3

• chore: move remaining api.thisisatest.tech references to api.agentmiddleware.dev

  #222·PetrefiedThunder opened Oct 25, 2026Collaborator·

  ·
  24

• feat(mcp): advertise api.agentmiddleware.dev remote and link API key page

  #219·PetrefiedThunder opened Oct 25, 2026Collaborator·

  ·
  6

• Prove the refund amount in receipt evidence, not just its existence

  #214·PetrefiedThunder opened Oct 24, 2026Collaborator·9 of 10 tasks·

  ·
  1

• fix(gateway): carry the failure lab target safety fuse into the monorepo

  #207·PetrefiedThunder opened Oct 24, 2026Collaborator·10 tasks done·

  ·
  2

• Stabilize ACP checkout latency check in CI

  #206·PetrefiedThunder opened Oct 24, 2026Collaborator·

  ·
  1

• ops: GitHub organization runbook, settings scripts, grouped Dependabot, secret-scan base after the history rewrite

  #194·PetrefiedThunder opened Oct 24, 2026Collaborator·

  ·
  35

• [audit-high] Agent docs misstate wallet freeze, MCP errors, and who can call

  #63·PetrefiedThunder opened Oct 9, 2026Collaborator·

  ·
  11

• [audit-high] Failure lab could bless a baseline that never did the work

  #60·PetrefiedThunder opened Oct 9, 2026Collaborator·

  ·
  14

• [audit-high] MCP example pinned one retry key and hid a failed replay

  #56·PetrefiedThunder opened Oct 9, 2026Collaborator·

  ·
  12

• [qa] Python SDK hardening: 104 new tests and 6 small fail-closed fixes

  #50·PetrefiedThunder opened Oct 9, 2026Collaborator·

  ·
  7

• [qa] Router QA: quote 500 on bad stored category, unbounded rotation-log limit

  #49·PetrefiedThunder opened Oct 9, 2026Collaborator·

  ·
  3

• [audit-high] Fix sandbox tenant leak, puzzle false allows, and SSRF numeric gap

  #40·PetrefiedThunder opened Oct 9, 2026Collaborator·

  ·
  8

• [audit-high] Refuse bad idempotency keys before money moves

  #32·PetrefiedThunder opened Oct 9, 2026Collaborator·

  ·
  8

• [audit-high] Audit verify missed sequence holes, a deleted tail, and a missing head

  #28·PetrefiedThunder opened Oct 9, 2026Collaborator·

  ·
  29