Issues

• prometheus datasource: Datasource config uses host.docker.internal without extra_hosts mapping in docker-compose

  bug
  terngunan/settliq-app#150 · Filter by author terngunan opened on Oct 13, 2026

• backend: enableCors is omitted in main.ts blocking browser clients from accessing settlement APIs

  bug
  terngunan/settliq-app#149 · Filter by author terngunan opened on Oct 13, 2026

• fee_distributor: Contract lacks get_admin query function to inspect administrative authority

  enhancement
  terngunan/settliq-app#148 · Filter by author terngunan opened on Oct 13, 2026

• settlement_ledger: Contract lacks get_admin query function to inspect current administrative authority

  enhancement
  terngunan/settliq-app#147 · Filter by author terngunan opened on Oct 13, 2026

• reconciliation: Contract lacks get_admin query function to inspect current administrative authority

  enhancement
  terngunan/settliq-app#146 · Filter by author terngunan opened on Oct 13, 2026

• fee_calculator: Contract lacks transfer_admin and get_admin entry points

  bug
  terngunan/settliq-app#145 · Filter by author terngunan opened on Oct 13, 2026

• batch_payments: Contract lacks transfer_admin and get_admin entry points locking administrative control

  bug
  terngunan/settliq-app#144 · Filter by author terngunan opened on Oct 13, 2026

• payment_escrow: Contract lacks transfer_admin entry point permanently locking admin authority

  bug
  terngunan/settliq-app#143 · Filter by author terngunan opened on Oct 13, 2026

• backend: Merchant.feeRate decimal column lacks TypeORM numeric transformer causing string type coercion bugs

  bug
  terngunan/settliq-app#142 · Filter by author terngunan opened on Oct 13, 2026

• multisig_admin: add_admin lacks upper ceiling on admin roster size in instance storage

  bug
  terngunan/settliq-app#141 · Filter by author terngunan opened on Oct 13, 2026

• platform_stats: Contract lacks transfer_admin and get_admin functions

  bug
  terngunan/settliq-app#140 · Filter by author terngunan opened on Oct 13, 2026

• slippage_protection: Contract lacks transfer_admin entry point permanently locking admin authority

  bug
  terngunan/settliq-app#139 · Filter by author terngunan opened on Oct 13, 2026

• escrow_upgrade_procedure.md: Upgrade runbook documents non-existent upgrade method instead of two-phase timelocked upgrade

  documentation
  terngunan/settliq-app#138 · Filter by author terngunan opened on Oct 13, 2026

• cache-alerts.yaml: Alert duration of 0s triggers false alarm storms on momentary cache misses

  bug
  terngunan/settliq-app#137 · Filter by author terngunan opened on Oct 13, 2026

• loki datasource: Missing explicit UID in loki.yaml breaks Grafana log alert evaluations

  bug
  terngunan/settliq-app#136 · Filter by author terngunan opened on Oct 13, 2026

• statuspage index.html: Header branding displays legacy 'CheesePay Status' instead of 'Settliq Status'

  bug
  terngunan/settliq-app#135 · Filter by author terngunan opened on Oct 13, 2026

• statuspage worker: Upstream health probe fetch lacks explicit timeout risking edge worker execution hanging

  bug
  terngunan/settliq-app#134 · Filter by author terngunan opened on Oct 13, 2026

• docker-compose.yml: Hardcoded default Grafana admin credentials violate container security practices

  bug
  terngunan/settliq-app#133 · Filter by author terngunan opened on Oct 13, 2026

• docker-compose.yml: Configuration only defines monitoring services and completely lacks backend and PostgreSQL containers

  enhancement
  terngunan/settliq-app#132 · Filter by author terngunan opened on Oct 13, 2026

• Makefile: Root Makefile lacks targets for backend build test and development workflows

  enhancement
  terngunan/settliq-app#131 · Filter by author terngunan opened on Oct 13, 2026

• ci.yml: Cargo test and build steps lack dependency caching resulting in slow and non-reproducible CI runs

  enhancement
  terngunan/settliq-app#130 · Filter by author terngunan opened on Oct 13, 2026

• join-waitlist.dto: Username field lacks character and length validation allowing control characters and URL-unsafe input

  bug
  terngunan/settliq-app#129 · Filter by author terngunan opened on Oct 13, 2026

• waitlist.controller: Public getPosition endpoint exposes waitlist membership status to unauthenticated callers

  bug
  terngunan/settliq-app#128 · Filter by author terngunan opened on Oct 13, 2026

• app.module: Automatic schema synchronization enabled for non-production environments risks staging data loss

  bug
  terngunan/settliq-app#127 · Filter by author terngunan opened on Oct 13, 2026

• merchants: email casing is not normalized allowing duplicate account creation with case-varied emails

  bug
  terngunan/settliq-app#126 · Filter by author terngunan opened on Oct 13, 2026