Issues

• Large-architecture pipeline resilience: skipped attack-chain phase, single-response output overflow, controls table drift

  stage:discovertype:bug
  davidmatousek/tachi#374 · Filter by author davidmatousek opened on Sep 27, 2026

• Adopter install + output fidelity fixes: installer manifest gaps, symlinked skills dir, infographic/PDF data extraction, Gemini render

  type:bug
  davidmatousek/tachi#373 · Filter by author davidmatousek opened on Sep 27, 2026

• Covering test for the FR-012b form-drift guard in extract-report-data.py

  enhancement
  davidmatousek/tachi#370 · Filter by author davidmatousek opened on Aug 12, 2026

• CI manifest-integrity check for adapter VERSION attestations (+ copilot-aware generator)

  enhancement
  davidmatousek/tachi#369 · Filter by author davidmatousek opened on Aug 12, 2026

• check-catalog-drift: _canonical() widening — decided DEFER with rationale; plus false-docstring defect (docstring :95 vs fail-closed fallback :105)

  type:bug
  davidmatousek/tachi#368 · Filter by author davidmatousek opened on Aug 11, 2026
  1

• State the LLM10:2026 generated-code scope boundary explicitly in OWASP_COVERAGE.md

  documentation
  davidmatousek/tachi#367 · Filter by author davidmatousek opened on Aug 11, 2026

• Persona↔catalog pattern-category enumeration parity for tachi threat agents

  enhancement
  davidmatousek/tachi#366 · Filter by author davidmatousek opened on Aug 11, 2026

• defect(test_backward_compatibility): 6 pre-existing byte-identity reds — measured typst font-subset tag divergence + untested self-perturbing PNG-input candidate

  type:bug
  davidmatousek/tachi#365 · Filter by author davidmatousek opened on Aug 11, 2026

• F-362b: re-key examples/** and sample-report baselines to the OWASP LLM 2026 σ (BLOCKING before next minor release)

  stage:discover
  davidmatousek/tachi#364 · Filter by author davidmatousek opened on Aug 11, 2026

• Extend tachi detection coverage for GhostCommit primitives (encoded exfil, convention-file trust, committed-file dormancy)

  stage:discovertype:idea
  davidmatousek/tachi#361 · Filter by author davidmatousek opened on Jul 13, 2026
  1

• Harden tachi's own agents against ingested-repo-text prompt injection (GhostCommit self-exposure)

  stage:discovertype:idea
  davidmatousek/tachi#360 · Filter by author davidmatousek opened on Jul 13, 2026
  1

• enhancement: parameterize generate-risk-scores-sarif.py (CLI args, configurable paths, findings-count gate) to support additional example baselines

  enhancement
  davidmatousek/tachi#357 · Filter by author davidmatousek opened on Jul 3, 2026

• defect(tachi-orchestrator): Phase-3 compilation can absorb output-integrity findings into the LLM-N sequence, dropping the OI- prefix carve-out and CWE citations (F-295 T026 gate FAIL)

  type:bug
  davidmatousek/tachi#356 · Filter by author davidmatousek opened on Jul 3, 2026

• defect: examples/agentic-app/sample-report/threats.md duplicates output-integrity findings under legacy LLM-5/6/7 and current OI-1/2/3 IDs

  type:bug
  davidmatousek/tachi#355 · Filter by author davidmatousek opened on Jul 3, 2026

• defect(292): cross-link-no-emission-contract.md §3/§6 — broken ruleId filter + non-executable invocation

  type:bug
  davidmatousek/tachi#354 · Filter by author davidmatousek opened on Jul 3, 2026

• Anthropic jailbreak-severity framework alignment (capability-gain risk lens)

  stage:discovertype:idea
  davidmatousek/tachi#349 · Filter by author davidmatousek opened on Jul 1, 2026

• gitleaks: no default rule covers hex-encoded generic high-entropy secrets

  enhancement
  davidmatousek/tachi#348 · Filter by author davidmatousek opened on Jul 1, 2026

• Harden read_sidecar against non-dict sidecar member entries (F-329 S-1)

  stage:discovertype:retro
  davidmatousek/tachi#346 · Filter by author davidmatousek opened on Jun 30, 2026

• Regenerate init.sh-substitution baseline (tests/fixtures/init-baseline-tree/) — re-tag from #329

  stage:discover
  davidmatousek/tachi#345 · Filter by author davidmatousek opened on Jun 30, 2026
  1

• Deliver-stage preflight: guard against stale/diverged local main and behind-main feature branch

  stage:discovertype:retro
  davidmatousek/tachi#342 · Filter by author davidmatousek opened on Jun 30, 2026

• Crosswalk: 4 citation-unsupported tachi-control-category → nist-ai-rmf edges (T029 survivors, Surface B non-table extras)

  follow-on-180
  davidmatousek/tachi#325 · Filter by author davidmatousek opened on Jun 10, 2026

• Track OWASP AIVSS v1.0 release and first external adopter case study

  stage:discovertype:retro
  davidmatousek/tachi#168 · Filter by author davidmatousek opened on Apr 15, 2026
  1

• Auto-detect architecture drift

  stage:discovertype:retro
  davidmatousek/tachi#126 · Filter by author davidmatousek opened on Apr 9, 2026

• Custom brand presets — user-definable brand identity via config file

  stage:discovertype:retro
  davidmatousek/tachi#62 · Filter by author davidmatousek opened on Mar 29, 2026

• Feature: Security Progression Summary — multi-run trend comparison over time

  stage:discovertype:idea
  davidmatousek/tachi#55 · Filter by author davidmatousek opened on Mar 28, 2026