Issues

• eval: consistency check is effect-blind — ALLOW↔DENY run-to-run disagreement passes as "consistent"

  aiacarea:policyarea:testing
  rossoctl/aiac#223 · Filter by author anatolykoyfman opened on Sep 23, 2026

• Guard: enforce description neutrality — no approve/deny language in agentic descriptions or policy domain-knowledge

  aiacarea:agentarea:library/idparea:policy
  rossoctl/aiac#217 · Filter by author anatolykoyfman opened on Sep 17, 2026
  2

• aiac.idp.configuration: add register_service_audience and allow_service_to_call

  aiacarea:library/idparea:librarystatus:blocked
  rossoctl/aiac#199 · Filter by author oblinder opened on Sep 9, 2026

• lab-aiac: enable forking after flipping to public

  aiacstatus:ready-for-human
  rossoctl/aiac#198 · Filter by author oblinder opened on Sep 9, 2026

• lab-aiac: go public — protection, security scans & forking

  aiacstatus:ready-for-human
  rossoctl/aiac#197 · Filter by author oblinder opened on Sep 9, 2026

• lab-aiac: activate branch protection + security scans (flip to public / upgrade plan)

  aiacstatus:ready-for-human
  rossoctl/aiac#196 · Filter by author oblinder opened on Sep 9, 2026

• Harden KeycloakAdmin connections against cleartext admin credentials over non-loopback HTTP

  aiac
  rossoctl/aiac#176 · Filter by author oblinder opened on Sep 9, 2026

• PDP OPA writer: batch POST /policy is non-atomic and unbounded

  aiac
  rossoctl/aiac#158 · Filter by author oblinder opened on Sep 9, 2026

• Unit tests: Policy Ingest Service

  aiacarea:policy-ingeststatus:ready-for-agent
  rossoctl/aiac#115 · Filter by author oblinder opened on Sep 9, 2026

• Policy Ingest Service

  aiacarea:policy-ingeststatus:ready-for-agent
  rossoctl/aiac#114 · Filter by author oblinder opened on Sep 9, 2026

• Unit tests: aiac.pdp.library (models + policy)

  aiacarea:library/pdparea:librarystatus:ready-for-agent
  rossoctl/aiac#98 · Filter by author oblinder opened on Sep 9, 2026

• Unit tests: aiac.idp.configuration access control methods

  aiacarea:library/idparea:librarystatus:blocked
  rossoctl/aiac#97 · Filter by author oblinder opened on Sep 9, 2026

• Unit tests: IdP Configuration Service optional scope endpoint + default rename

  aiacarea:idp-configuration-servicestatus:blocked
  rossoctl/aiac#84 · Filter by author oblinder opened on Sep 9, 2026

• IdP Configuration Service: rename default scope endpoint + add optional scope endpoint

  aiacarea:idp-configuration-servicestatus:ready-for-agent
  rossoctl/aiac#83 · Filter by author oblinder opened on Sep 9, 2026

• Kubernetes Deployment manifests — Phase 2: Init Container

  aiacarea:deploymentstatus:ready-for-agent
  rossoctl/aiac#74 · Filter by author oblinder opened on Sep 9, 2026

• Kubernetes Deployment manifests — Phase 3: Policy Store + Policy Ingest Pods

  aiacarea:deploymentstatus:ready-for-agent
  rossoctl/aiac#73 · Filter by author oblinder opened on Sep 9, 2026

• Kubernetes Deployment manifests — Phase 2: Event Broker

  aiacarea:deploymentstatus:ready-for-agent
  rossoctl/aiac#71 · Filter by author oblinder opened on Sep 9, 2026

• Service Offboarding (UC4)

  aiacarea:agent/service-offboardingarea:agentstatus:ready-for-agent
  rossoctl/aiac#50 · Filter by author oblinder opened on Sep 9, 2026

• Unit tests: Role sub-agent

  aiacarea:agent/role-updatearea:agentstatus:ready-for-agent
  rossoctl/aiac#49 · Filter by author oblinder opened on Sep 9, 2026

• Role sub-agent (UC3)

  aiacarea:agent/role-updatearea:agentstatus:ready-for-agent
  rossoctl/aiac#48 · Filter by author oblinder opened on Sep 9, 2026

• Unit tests: Policy Update sub-agents (Build + Rebuild)

  aiacarea:agent/policy-updatearea:agentstatus:blocked
  rossoctl/aiac#47 · Filter by author oblinder opened on Sep 9, 2026

• Policy Update sub-agents: Build + Rebuild (UC2)

  aiacarea:agent/policy-updatearea:agentstatus:ready-for-human
  rossoctl/aiac#46 · Filter by author oblinder opened on Sep 9, 2026

• Unit tests: aiac_cli — generate_policy_only + main

  aiacarea:agentstatus:needs-info
  rossoctl/aiac#44 · Filter by author oblinder opened on Sep 9, 2026

• Unit tests: AIAC Init Container

  aiacarea:agentstatus:ready-for-agent
  rossoctl/aiac#43 · Filter by author oblinder opened on Sep 9, 2026

• AIAC Init Container

  aiacarea:agentstatus:ready-for-agent
  rossoctl/aiac#39 · Filter by author oblinder opened on Sep 9, 2026