Issues

• host diff: unread-input headline for workflows, bind command-setting scripts, align Action redaction, model disabledMcpjsonServers, endpoint URL path changes

  bugengineering-reviewP2workstream:host
  ThreeMoonsLab/agents-shipgate#1084 · Filter by author pengfei-threemoonslab opened on Oct 13, 2026

• privacy: redact AWS keys inside path or URL segments and URL-safe or unpadded Basic credentials

  area:verifybugengineering-reviewP2
  ThreeMoonsLab/agents-shipgate#1082 · Filter by author pengfei-threemoonslab opened on Oct 13, 2026

• report.json: record the base exit floor beside fail_policy.fail_on

  area:verifyengineering-reviewenhancementP2
  ThreeMoonsLab/agents-shipgate#1081 · Filter by author pengfei-threemoonslab opened on Oct 13, 2026

• docs: STABILITY exit-code text says 20 is strict-only; advisory exits 20 on a fail_on match (and the base floor after #1074)

  area:verifydocumentationengineering-reviewP2
  ThreeMoonsLab/agents-shipgate#1080 · Filter by author pengfei-threemoonslab opened on Oct 13, 2026

• privacy: redact the capability-lock files and redact before truncating in the n8n auth-risk reader

  area:verifybugengineering-reviewP1
  ThreeMoonsLab/agents-shipgate#1079 · Filter by author pengfei-threemoonslab opened on Oct 13, 2026
  1

• tests: key the static-only subprocess allowlist by function, not line number

  engineering-reviewenhancementP2workstream:maintenance
  ThreeMoonsLab/agents-shipgate#1078 · Filter by author pengfei-threemoonslab opened on Oct 13, 2026

• verify: verification prepare reads an in-repo --diff-from from the base; a directory replaced by a file is not a config_error

  area:verifybugengineering-reviewP2
  ThreeMoonsLab/agents-shipgate#1076 · Filter by author pengfei-threemoonslab opened on Oct 13, 2026

• trust roots: a manifest-declared policy pack outside policies/** must be a trust root

  area:verifybugengineering-reviewP1
  ThreeMoonsLab/agents-shipgate#1075 · Filter by author pengfei-threemoonslab opened on Oct 13, 2026

• n8n/MCP readers: deterministic key choice in _top_level_string, a specific next_action for unread other-host MCP files, exact mcpClientTool matching

  area:adapterbugengineering-reviewP2
  ThreeMoonsLab/agents-shipgate#1073 · Filter by author pengfei-threemoonslab opened on Oct 13, 2026

• verifier 0.22: typed base_unresolved and manifest_removed stops; align preview base detection and trigger reports-dir exclusion

  area:verifyengineering-reviewenhancementP2
  ThreeMoonsLab/agents-shipgate#1071 · Filter by author pengfei-threemoonslab opened on Oct 13, 2026

• attest: take human_ack and the policy snapshot from report.json only when a receipt binds it

  area:identitybugengineering-reviewP1
  ThreeMoonsLab/agents-shipgate#1068 · Filter by author pengfei-threemoonslab opened on Oct 13, 2026

• verification identity: close the residual legacy-label exemption (validate legacy shape or deprecate 0.1–0.4 reads)

  area:identityengineering-reviewenhancementP2
  ThreeMoonsLab/agents-shipgate#1069 · Filter by author pengfei-threemoonslab opened on Oct 13, 2026

• verify: the host-only route must remove an earlier run's scan artifacts from the output directory

  area:verifybugengineering-reviewP2
  ThreeMoonsLab/agents-shipgate#1067 · Filter by author pengfei-threemoonslab opened on Oct 13, 2026

• org bundle: check the supplied attestation's verdict against the receipt-validated verifier

  area:identitybugengineering-reviewP1workstream:control
  ThreeMoonsLab/agents-shipgate#1066 · Filter by author pengfei-threemoonslab opened on Oct 13, 2026

• openapi: read percent-encoded and integer-key refs, 3.1 sibling keywords and path-level parameters behind a path-item $ref

  area:adapterbugengineering-reviewP2
  ThreeMoonsLab/agents-shipgate#1064 · Filter by author pengfei-threemoonslab opened on Oct 13, 2026

• verify: record the effective plugins_enabled in the capability lock

  area:verifybugengineering-reviewP2
  ThreeMoonsLab/agents-shipgate#1062 · Filter by author pengfei-threemoonslab opened on Oct 13, 2026

• Engineering review 2026-10-12: implementation order and run ledger

  engineering-reviewepic
  ThreeMoonsLab/agents-shipgate#1060 · Filter by author pengfei-threemoonslab opened on Oct 13, 2026

• decide: should diff count an untracked .claude/settings.local.json as part of a change?

  engineering-reviewenhancementP2questionworkstream:host
  ThreeMoonsLab/agents-shipgate#1059 · Filter by author pengfei-threemoonslab opened on Oct 13, 2026

• decide: supported Python and OS range: cap requires-python, or test 3.13/3.14 and Windows

  area:releaseengineering-reviewenhancementP2questionworkstream:maintenance
  ThreeMoonsLab/agents-shipgate#1058 · Filter by author pengfei-threemoonslab opened on Oct 13, 2026

• decide: stop emitting the bare shipgate command, and keep or drop the alias at 2.0

  area:agent-modeengineering-reviewenhancementP1question
  ThreeMoonsLab/agents-shipgate#1057 · Filter by author pengfei-threemoonslab opened on Oct 13, 2026

• decide: may lexical heuristics move release verdicts, or only publish advisory findings?

  engineering-reviewenhancementP1question
  ThreeMoonsLab/agents-shipgate#1055 · Filter by author pengfei-threemoonslab opened on Oct 13, 2026

• decide: prune and unhide CLI surface: dead code, hidden commands, mcp audit, flags

  engineering-reviewenhancementP2questionworkstream:maintenance
  ThreeMoonsLab/agents-shipgate#1056 · Filter by author pengfei-threemoonslab opened on Oct 13, 2026

• docs: contract-first STABILITY.md, migration notes moved out, generated field lists

  documentationengineering-reviewP2workstream:maintenance
  ThreeMoonsLab/agents-shipgate#1054 · Filter by author pengfei-threemoonslab opened on Oct 13, 2026

• architecture: move the decision engine to core/decision; enforce import layers

  engineering-reviewenhancementP2workstream:maintenance
  ThreeMoonsLab/agents-shipgate#1053 · Filter by author pengfei-threemoonslab opened on Oct 13, 2026

• packaging: one source for the default Codex policy and the identity-hashed wheel payload

  area:releasebugengineering-reviewP2workstream:maintenance
  ThreeMoonsLab/agents-shipgate#1051 · Filter by author pengfei-threemoonslab opened on Oct 13, 2026