-
-
Notifications
You must be signed in to change notification settings - Fork 1
All issues
Issue creation is restricted in this repository
Issues
is:issue state:open
is:issue state:open
Search results
Medium: GitHub Action/CLI audit messaging can overstate trust by presenting pass/fail output without conveying proof scope or verification limits
bugSomething isn't workingSomething isn't workingStatus: Open.#26 In QWED-AI/qwed-ucp;Medium: Generic exception handling collapses engine failures into ordinary verification errors instead of typed integrity states
bugSomething isn't workingSomething isn't workingStatus: Open.#25 In QWED-AI/qwed-ucp;Medium: Core and advanced guard orchestration lacks an explicit policy model for which proofs are mandatory by transaction context
bugSomething isn't workingSomething isn't workingStatus: Open.#24 In QWED-AI/qwed-ucp;High: Attestation payload can overstate trust because it inherits ambiguous verifier semantics without proof-grade context
bugSomething isn't workingSomething isn't workingStatus: Open.#23 In QWED-AI/qwed-ucp;Medium: Line-item reconciliation is optional, allowing top-level totals to verify without mandatory proof from transaction basis
bugSomething isn't workingSomething isn't workingStatus: Open.#22 In QWED-AI/qwed-ucp;Medium: Currency verification is not part of the canonical core verifier, allowing monetary trust decisions without enforced currency semantics
bugSomething isn't workingSomething isn't workingStatus: Open.#21 In QWED-AI/qwed-ucp;Medium: Test suite currently encodes fail-open and semantically unsafe behavior as accepted contract
bugSomething isn't workingSomething isn't workingStatus: Open.#20 In QWED-AI/qwed-ucp;High: MoneyGuard total parsing allows duplicate and unsupported total types to collapse into ambiguous verified states
bugSomething isn't workingSomething isn't workingStatus: Open.#17 In QWED-AI/qwed-ucp;Medium: Insecure attestation dev mode can silently produce non-portable trust artifacts
bugSomething isn't workingSomething isn't workingStatus: Open.#16 In QWED-AI/qwed-ucp;Medium: Publish workflow lacks a strong release-boundary gate tying release publication to verified artifact integrity
bugSomething isn't workingSomething isn't workingStatus: Open.#15 In QWED-AI/qwed-ucp;High: Audit continuity is absent — verification history can reset without tamper evidence or durable chain linkage
bugSomething isn't workingSomething isn't workingStatus: Open.#14 In QWED-AI/qwed-ucp;High: Public documentation and API surface collapse partial checks and full verification into the same trust signal
bugSomething isn't workingSomething isn't workingStatus: Open.#13 In QWED-AI/qwed-ucp;