-
-
Notifications
You must be signed in to change notification settings - Fork 2
All issues
Issue creation is restricted in this repository
- #28 · andysalvo opened
on Jun 2, 2026 9
Issues
is:issue state:open
is:issue state:open
Search results
docs(crypto): verify_attestation docstring claims 'Verifies a sender's JWT signature' — false trust signal in security API
documentationImprovements or additions to documentationImprovements or additions to documentationp3p3p3Status: Open.#39 In QWED-AI/qwed-a2a;fix(interceptor): VerdictStatus.ERROR defined in schema but never emitted — error path uses BLOCKED instead
bugSomething isn't workingSomething isn't workingp2p2p2semantic-integritysemantic-integritysemantic-integrityStatus: Open.#38 In QWED-AI/qwed-a2a;fix(schema): max_payload_size_bytes defined but never enforced — advertised DoS control is dead code
bugSomething isn't workingSomething isn't workingp2p2p2Status: Open.#33 In QWED-AI/qwed-a2a;Refactor: separate allowed_receivers into allowed_receivers + allowed_senders for explicit directional scoping
p3p3p3refactorrefactorrefactorsecuritysecuritysecuritytrust-boundarytrust-boundarytrust-boundaryStatus: Open.#31 In QWED-AI/qwed-a2a;Cross-verification proposal: QWED attestation verdicts against independence failure vectors
discussiondiscussiondiscussionStatus: Open.#28 In QWED-AI/qwed-a2a;fix(schema): AgentMessage.signature field accepted but never verified — creates false trust signal
bugSomething isn't workingSomething isn't workingenhancementNew feature or requestNew feature or requestp3p3p3semantic-integritysemantic-integritysemantic-integrityStatus: Open.#19 In QWED-AI/qwed-a2a;fix(interceptor): trace_id is caller-controlled in library mode — enables audit log collisions
audit-continuityaudit-continuityaudit-continuityenhancementNew feature or requestNew feature or requestp3p3p3securitysecuritysecurityStatus: Open.#18 In QWED-AI/qwed-a2a;fix(interceptor): DATA_QUERY is a named payload type with no verification engine — silently passthroughs as verified
bugSomething isn't workingSomething isn't workingfail-closedfail-closedfail-closedp2p2p2securitysecuritysecurityStatus: Open.#16 In QWED-AI/qwed-a2a;fix(interceptor): block_on_error=False option creates configurable fail-open path on engine exception
bugSomething isn't workingSomething isn't workingfail-closedfail-closedfail-closedp2p2p2securitysecuritysecurityStatus: Open.#15 In QWED-AI/qwed-a2a;fix(schema): VerdictStatus taxonomy collapses all outcomes into FORWARDED — semantic separation impossible
bugSomething isn't workingSomething isn't workingp1p1p1securitysecuritysecuritysemantic-integritysemantic-integritysemantic-integrityStatus: Open.#13 In QWED-AI/qwed-a2a;