Issues

• apps/web resolves zod 3.25.76, which GHSA-mrhx-c7xc-m3w5 covers, and no apps/web source imports it

  opena2a-org/agent-identity-management#897 · Filter by author thebenignhacker opened on Oct 29, 2026

• ARP filesystem interceptor: prefix compare admits sibling paths and ESM imports bypass the hooks

  opena2a-org/agent-identity-management#896 · Filter by author thebenignhacker opened on Oct 28, 2026

• Changelog reconciliation table says 124 commits are unlisted; the range on main has 126

  opena2a-org/agent-identity-management#894 · Filter by author thebenignhacker opened on Oct 25, 2026

• aim-arp echoes an unknown argument with its control characters and line breaks intact

  opena2a-org/agent-identity-management#890 · Filter by author thebenignhacker opened on Oct 24, 2026

• register_agent sends the stored sign-in's access token to whichever aim_url the caller passes

  opena2a-org/agent-identity-management#889 · Filter by author thebenignhacker opened on Oct 24, 2026

• aim-sdk demo ends in a traceback when the stored sign-in's server address is not a string

  opena2a-org/agent-identity-management#888 · Filter by author thebenignhacker opened on Oct 24, 2026

• VerifyChainSet reports a present chain verified while a held checkpoint of it cannot be opened

  opena2a-org/agent-identity-management#887 · Filter by author thebenignhacker opened on Oct 24, 2026

• aim-arp telemetry status prints a bare EISDIR error when a state file path is a directory

  opena2a-org/agent-identity-management#884 · Filter by author thebenignhacker opened on Oct 23, 2026

• aim-arp telemetry status says "could not write" when it cannot read a state file

  opena2a-org/agent-identity-management#883 · Filter by author thebenignhacker opened on Oct 23, 2026

• apps/web production dependency tree resolves source-map-js 1.2.1 and baseline-browser-mapping 2.10.19, both under advisories

  opena2a-org/agent-identity-management#881 · Filter by author thebenignhacker opened on Oct 23, 2026

• AIMClient error quotes a malformed server address that holds a user name and password

  opena2a-org/agent-identity-management#880 · Filter by author thebenignhacker opened on Oct 23, 2026

• ARP proxy: openai-api request inspection scans only user messages whose content is a string, so blockOnDetection does not apply to other request shapes

  opena2a-org/agent-identity-management#879 · Filter by author thebenignhacker opened on Oct 23, 2026

• aim-sdk --version reports a release wheel installed from a file or URL as built from source

  opena2a-org/agent-identity-management#877 · Filter by author thebenignhacker opened on Oct 23, 2026

• aim-sdk init and aim-arp init point to a dashboard onboarding screen that does not mint tokens

  opena2a-org/agent-identity-management#876 · Filter by author thebenignhacker opened on Oct 23, 2026

• aim-sdk demo --url prints the --url server but registers the agent on the stored sign-in's server

  opena2a-org/agent-identity-management#874 · Filter by author thebenignhacker opened on Oct 23, 2026

• internal/record package doc misstates the outcome VerifyChainSet gives a present chain that fails

  opena2a-org/agent-identity-management#873 · Filter by author thebenignhacker opened on Oct 23, 2026

• aim-arp prints an empty argument as nothing: "Unknown command: " with no name after it

  opena2a-org/agent-identity-management#871 · Filter by author thebenignhacker opened on Oct 23, 2026

• ARPProxy.start() never rejects when listen fails; the process exits on an unhandled error event

  opena2a-org/agent-identity-management#870 · Filter by author thebenignhacker opened on Oct 23, 2026

• AIMClientSdkRecoverRouteTest fails on main, and CI runs none of the Java SDK's client tests

  opena2a-org/agent-identity-management#866 · Filter by author thebenignhacker opened on Oct 22, 2026

• CODEOWNERS comment contradicts gate-file-approval.yml on who can approve a gate-file change

  opena2a-org/agent-identity-management#864 · Filter by author thebenignhacker opened on Oct 22, 2026

• ~/.aim is created with mode 0755, and the CLIs change an existing folder's mode without saying so

  opena2a-org/agent-identity-management#860 · Filter by author thebenignhacker opened on Oct 22, 2026

• ARP: an analyzer that does not read all of its input says nothing about the part it skipped

  opena2a-org/agent-identity-management#856 · Filter by author thebenignhacker opened on Oct 22, 2026

• New-user test of the two CLIs (aim-arp, aim-sdk), 2026-10-21: 11 follow-up items

  opena2a-org/agent-identity-management#852 · Filter by author thebenignhacker opened on Oct 22, 2026

• CI skips the agent-request-v2 vector tests when only the vectors file changes

  opena2a-org/agent-identity-management#820 · Filter by author thebenignhacker opened on Oct 20, 2026

• Keep SIEM forwarding state out of the unauthenticated /health/ready body

  bugsecurity
  opena2a-org/agent-identity-management#813 · Filter by author thebenignhacker opened on Oct 20, 2026