Issues

• Govern resident/visitor occupancy and remote-cognition disclosure as separate acts

  dp-web4/hestia#1338 · Filter by author dp-web4 opened on Oct 17, 2026
  1

• Router side of H5 (web4 PR 920): relay on_behalf_of, re-sign on stale_epoch / window, pin the act-as vector

  dp-web4/hestia#1336 · Filter by author dp-web4 opened on Oct 17, 2026

• Gate escalation records still cut the act at 220 chars (#1301 fixed scope requests only); held-patch applies lose their digest

  dp-web4/hestia#1333 · Filter by author dp-web4 opened on Oct 16, 2026

• Member-mesh: move admission and permissions from Git-tracked MEMBERS roster to governed administration

  dp-web4/hestia#1332 · Filter by author dp-web4 opened on Oct 16, 2026

• Gate: symlink, swap, content and hardlink escape classes (from hardbound #427) — innate egress on resolved paths first

  dp-web4/hestia#1331 · Filter by author dp-web4 opened on Oct 16, 2026
  2

• egress.secret fires on secret-like WORDS in prose arguments (gh --body, commit -m), blocking security write-ups; judge path positions, not data

  dp-web4/hestia#1330 · Filter by author dp-web4 opened on Oct 15, 2026

• Gate mrh.command: network-URL operand after cd judged as a path (split from #1314; needs a model of the client's output destinations)

  dp-web4/hestia#1329 · Filter by author dp-web4 opened on Oct 15, 2026

• mrh.command: one read-only git command opened 7 scope requests - args resolved against a nonexistent base, rev ranges read as paths

  dp-web4/hestia#1327 · Filter by author dp-web4 opened on Oct 15, 2026

• Delegation is not consulted on the tool-call decision path: no decision row names the authority an act ran under

  dp-web4/hestia#1320 · Filter by author dp-web4 opened on Oct 14, 2026
  1

• Gate: after a leading 'cd D &&', a relative path is also judged against the event cwd (false deny, or the wrong path named)

  dp-web4/hestia#1317 · Filter by author dp-web4 opened on Oct 14, 2026
  1

• Gate mrh.command: non-path text judged as a path — URLs (with or without scheme), absolute executables, and a wrong cwd model after cd

  dp-web4/hestia#1314 · Filter by author dp-web4 opened on Oct 14, 2026
  3

• scope_call ignores HESTIA_HOME/endpoint: core_refusal_recorded_test opens real scope requests on the live daemon

  dp-web4/hestia#1311 · Filter by author dp-web4 opened on Oct 14, 2026

• #1287 part 2: a literal loop list (and a literal single assignment) is enumerable — judge each item instead of refusing the loop

  dp-web4/hestia#1308 · Filter by author dp-web4 opened on Oct 14, 2026
  1

• Per-member loosening grants (e.g. 'permissive') are in-memory and silently revoked by every daemon restart / deploy

  dp-web4/hestia#1306 · Filter by author dp-web4 opened on Oct 14, 2026

• deploy preflight hold probe opens peer scope requests (health check soliciting governance, new channel)

  dp-web4/hestia#1300 · Filter by author dp-web4 opened on Oct 13, 2026
  8

• Local builds after #1294: the web4 pin moved, and a shared CARGO_TARGET_DIR makes paths-overrides poison sibling worktrees

  dp-web4/hestia#1299 · Filter by author dp-web4 opened on Oct 13, 2026

• An asker cannot withdraw a gate-opened scope request, so its own mistaken probe still costs a peer a decision

  dp-web4/hestia#1297 · Filter by author dp-web4 opened on Oct 13, 2026
  2

• The wake primer names an out-of-scope log path: last-words.py's '(full log: …)' draws a gated read every wake since #1232

  dp-web4/hestia#1291 · Filter by author dp-web4 opened on Oct 13, 2026
  3

• A peer-approved once grant is unspendable from a later wake: scope_act_digest binds the host session (and cwd), and neither is shown

  dp-web4/hestia#1290 · Filter by author dp-web4 opened on Oct 13, 2026
  2

• Deny credential reads at the OS layer so egress.secret can stop over-matching text

  dp-web4/hestia#1284 · Filter by author dp-web4 opened on Oct 12, 2026
  1

• Recursive workspace grants do not cover repository-named connector calls; bind repair to origin identity

  dp-web4/hestia#1281 · Filter by author dp-web4 opened on Oct 12, 2026
  8

• Daemon-down fallback honours scope from a member-writable identity file (#133 leftover)

  dp-web4/hestia#1278 · Filter by author dp-web4 opened on Oct 11, 2026

• Gate: git merge / out-of-repo git apply write governed paths without escalation (writer classification by surface text, not resolved write set)

  dp-web4/hestia#1273 · Filter by author dp-web4 opened on Oct 9, 2026

• hub memberships (#1253) follow-ups: parallel bounded probes, bounded error reads, structured hub errors, URL-normalised active

  dp-web4/hestia#1269 · Filter by author dp-web4 opened on Oct 7, 2026

• ensure_member_identity is not atomic: a partial write leaves a node that can never apply to a hub

  dp-web4/hestia#1270 · Filter by author dp-web4 opened on Oct 7, 2026