Issues

• later: the rubric behaviour-fingerprint corpus has no shallow clone, so v27 builds that differ on shallow clones share one fingerprint

  BargLabs/cejel#622 · Filter by author houman44 opened on Nov 1, 2026
  1

• later: an evidence path over 700 characters fails validation, so the scan writes no report

  BargLabs/cejel#612 · Filter by author houman44 opened on Oct 29, 2026

• later: pin the history-fallback budget start on react's path (rev-list OK, diff-tree overflows)

  BargLabs/cejel#595 · Filter by author houman44 opened on Oct 24, 2026

• later: release.sh — currency_read's status read is unchecked (stage 11 prints an empty status and continues; stage 13 exits silently)

  BargLabs/cejel#585 · Filter by author houman44 opened on Oct 22, 2026

• later: #558 records — scope the arithmetic-backstop claim; reconcile the cap-case timing figures

  BargLabs/cejel#584 · Filter by author houman44 opened on Oct 22, 2026

• later: real-scan coverage of the A2 history-read timeout cause (#560 failed-history)

  BargLabs/cejel#583 · Filter by author houman44 opened on Oct 22, 2026

• later: #560 follow-ups — name unreadable .git files in the records; .git symlink to a stray dir; test the unreadable-gitfile branch

  BargLabs/cejel#577 · Filter by author houman44 opened on Oct 22, 2026

• later: #558's executed-shapes check records a shape when it starts, not when its assertions pass

  BargLabs/cejel#576 · Filter by author houman44 opened on Oct 22, 2026

• later: investigate whether scan output depends on machine load (git timeout → inventory fallback), seen once as 100 spurious lost findings

  BargLabs/cejel#574 · Filter by author houman44 opened on Oct 22, 2026

• later: A2 history scan uses --diff-filter=AM, so a secret that arrives by a type change (symlink/gitlink to file) is never read (all rubrics)

  BargLabs/cejel#573 · Filter by author houman44 opened on Oct 22, 2026

• later: with git missing from PATH, a git repository's A2 history reads are treated as 'not a repository' and A2 goes silently not applicable (all rubrics)

  BargLabs/cejel#568 · Filter by author houman44 opened on Oct 22, 2026
  1

• later: isCiWorkflow credits workflows in subdirectories of .github/workflows, which GitHub never runs (all rubrics)

  BargLabs/cejel#565 · Filter by author houman44 opened on Oct 22, 2026

• later: the print-only reader assumes bash; a PowerShell echo that runs repository code is called 'only prints text' (v17 disclosure in 0.6.8; v27 credit in #562)

  BargLabs/cejel#564 · Filter by author houman44 opened on Oct 22, 2026

• later: wall-clock timing guards fail under full-suite load (regex-redos-guard 50 ms, scan-path-regex-bounds 2 s)

  BargLabs/cejel#561 · Filter by author houman44 opened on Oct 22, 2026

• later: the behaviour corpus has no shallow clone, so rubricBehaviourFingerprint cannot tell v27 with #556 from without it

  BargLabs/cejel#559 · Filter by author houman44 opened on Oct 22, 2026

• later: README --rubric-pin list stops at v26 and the calibration-policy section predates the accepted #526 ruling

  BargLabs/cejel#557 · Filter by author houman44 opened on Oct 22, 2026

• later: ADR-0001 Phase 3 requires a holdout re-run; the operator directed no new holdouts (2026-10-22)

  BargLabs/cejel#555 · Filter by author houman44 opened on Oct 22, 2026

• later: restart the Maeve courier and add a liveness alarm (silent twice: after 2026-10-07 and 2026-10-15)

  BargLabs/cejel#551 · Filter by author houman44 opened on Oct 21, 2026

• later: sixteen ^\s*…/m and (?:^|[{,])\s*… regexes are quadratic on runs of blank lines (scan stall, pre-existing)

  BargLabs/cejel#550 · Filter by author houman44 opened on Oct 21, 2026
  1

• later: A4 CI lockfile note still claims for skipped jobs, bash {0}/set +e steps, non-first-word generators and other-ref checkouts

  BargLabs/cejel#546 · Filter by author houman44 opened on Oct 21, 2026
  3

• later: ingested producer name/version are recorded without credential redaction

  BargLabs/cejel#545 · Filter by author houman44 opened on Oct 21, 2026

• later: name the content entries excluded by extension

  BargLabs/cejel#538 · Filter by author houman44 opened on Oct 21, 2026

• later: A2 secrets surface ignores committed env files not named .env*; placeholder and template rules need an operator decision

  BargLabs/cejel#537 · Filter by author houman44 opened on Oct 21, 2026

• later: B3 CI command categories miss package-script lint and type-check invocations (prospective rubric)

  BargLabs/cejel#536 · Filter by author houman44 opened on Oct 21, 2026

• later: B3 PR-gate count credits workflows that run no check or target an absent branch (prospective rubric)

  BargLabs/cejel#535 · Filter by author houman44 opened on Oct 21, 2026
  1