Issues

• hardening(cli): --help still prints [env: CORA_BASE_URL=...]; redact credentials in URL-valued env defaults

  enhancementpriority:lowscope:cli
  codecoradev/cora-code#687 · Filter by author ajianaz opened on Oct 16, 2026

• feat(mcp): cora.scan_prepare needs include/exclude, smarter batch ordering and size hints (agent mode is impractical on large repos)

  enhancementpriority:mediumscope:integration
  codecoradev/cora-code#686 · Filter by author ajianaz opened on Oct 16, 2026

• fix(mcp): cora.scan_finalize reports whole-directory coverage when the agent judged only some batches

  bugpriority:mediumscope:integration
  codecoradev/cora-code#685 · Filter by author ajianaz opened on Oct 16, 2026

• feat(scan): qual-clone produces 306 info findings on one Rust workspace; add a default-off or a --min-severity for scan

  enhancementpriority:lowscope:core
  codecoradev/cora-code#683 · Filter by author ajianaz opened on Oct 16, 2026

• feat(rules): bug-println flags eprintln!; bug-expect flags expect("<invariant>") like a bare unwrap()

  enhancementpriority:mediumscope:core
  codecoradev/cora-code#682 · Filter by author ajianaz opened on Oct 16, 2026

• fix(rules): bug-todo matches the word "todo" in identifiers, module names and prose (22 of 22 hits were false positives)

  bugpriority:mediumscope:core
  codecoradev/cora-code#681 · Filter by author ajianaz opened on Oct 16, 2026

• feat(ignore): path-scoped ignore.rules (silence a rule in some directories only)

  enhancementpriority:mediumscope:core
  codecoradev/cora-code#680 · Filter by author ajianaz opened on Oct 16, 2026