-
-
Notifications
You must be signed in to change notification settings - Fork 2
All issues
Issue creation is restricted in this repository
- #28 · andysalvo opened
on Jun 2, 2026 10
Issues
is:issue state:open
is:issue state:open
Search results
fix(obs): /metrics unauthenticated with raw agent IDs + unbounded cardinality; payload_hash is a 4th non-RFC-8785 canonicalizer; UNVERIFIABLE indistinguishable from never-intercepted
bugSomething isn't workingSomething isn't workingp3p3p3securitysecuritysecurityStatus: Open.#87 In QWED-AI/qwed-a2a;fix(engines): logic contradiction detection bypassed by case/whitespace variants; financial engine verifies negative amounts and quantities
bugSomething isn't workingSomething isn't workingfail-closedfail-closedfail-closedp2p2p2securitysecuritysecurityStatus: Open.#86 In QWED-AI/qwed-a2a;fix(crypto): jti registry lifecycle — issuing service can never verify its own tokens, per-process replay windows, issuance ignores duplicate jti
audit-continuityaudit-continuityaudit-continuitybugSomething isn't workingSomething isn't workingp2p2p2securitysecuritysecurityStatus: Open.#85 In QWED-AI/qwed-a2a;fix(crypto): no peer-key model — verify_attestation resolves only the local key; cross-agent verification impossible without shared private key (universal forgery)
audit-continuityaudit-continuityaudit-continuitybugSomething isn't workingSomething isn't workingp1p1p1securitysecuritysecurityStatus: Open.#84 In QWED-AI/qwed-a2a;fix(endpoints): /a2a/intercept has no authentication — sender_agent_id is self-declared, anyone can be any trusted agent (impersonation → forwarded + signed JWT)
bugSomething isn't workingSomething isn't workingfail-closedfail-closedfail-closedp1p1p1securitysecuritysecuritytrust-boundarytrust-boundarytrust-boundaryStatus: Open.#83 In QWED-AI/qwed-a2a;docs(crypto): verify_attestation docstring claims 'Verifies a sender's JWT signature' — false trust signal in security API
documentationImprovements or additions to documentationImprovements or additions to documentationp3p3p3Status: Open.#39 In QWED-AI/qwed-a2a;fix(interceptor): VerdictStatus.ERROR defined in schema but never emitted — error path uses BLOCKED instead
bugSomething isn't workingSomething isn't workingp2p2p2semantic-integritysemantic-integritysemantic-integrityStatus: Open.#38 In QWED-AI/qwed-a2a;fix(schema): max_payload_size_bytes defined but never enforced — advertised DoS control is dead code
bugSomething isn't workingSomething isn't workingp2p2p2Status: Open.#33 In QWED-AI/qwed-a2a;Refactor: separate allowed_receivers into allowed_receivers + allowed_senders for explicit directional scoping
p3p3p3refactorrefactorrefactorsecuritysecuritysecuritytrust-boundarytrust-boundarytrust-boundaryStatus: Open.#31 In QWED-AI/qwed-a2a;Cross-verification proposal: QWED attestation verdicts against independence failure vectors
discussiondiscussiondiscussionStatus: Open.#28 In QWED-AI/qwed-a2a;fix(schema): AgentMessage.signature field accepted but never verified — creates false trust signal
bugSomething isn't workingSomething isn't workingenhancementNew feature or requestNew feature or requestp3p3p3semantic-integritysemantic-integritysemantic-integrityStatus: Open.#19 In QWED-AI/qwed-a2a;fix(interceptor): trace_id is caller-controlled in library mode — enables audit log collisions
audit-continuityaudit-continuityaudit-continuityenhancementNew feature or requestNew feature or requestp3p3p3securitysecuritysecurityStatus: Open.#18 In QWED-AI/qwed-a2a;