Issues

• sandbox-relay: no SIGTERM teardown, so a relay restart leaves stale presence records and turns in the gap get an in-turn tool error instead of a 503

  bug
  rossoctl/moca#453 · Filter by author pdettori opened on Oct 6, 2026

• P4: the worker advertises lease slots its memory budget can no longer admit, so turns get an in-turn tool error instead of a 503

  enhancement
  rossoctl/moca#452 · Filter by author pdettori opened on Oct 6, 2026

• harness: compare-and-set for the affinity fallback, so concurrent past-grace turns of one session cannot split it

  enhancement
  rossoctl/moca#447 · Filter by author pdettori opened on Oct 6, 2026

• deploy/k8s: sandbox egress except-list misses publicly routable node/infra networks

  enhancement
  rossoctl/moca#446 · Filter by author pdettori opened on Oct 6, 2026

• Make workload activation and deletion state transitions concurrency-safe

  rossoctl/moca#445 · Filter by author moonlight16 opened on Oct 5, 2026

• P4 relay Route: client certificates (mTLS) at the ghostunnel sidecar, so a token alone cannot attach

  enhancement
  rossoctl/moca#441 · Filter by author pdettori opened on Oct 5, 2026

• CI: run the deploy bash suites under bash 3.2 (macOS /bin/bash), and make the harnesses use the bash they were launched with

  enhancement
  rossoctl/moca#440 · Filter by author pdettori opened on Oct 5, 2026

• sandbox-relay: server keepalive, so a P4 host whose network drops is detected before the router's 5 m timeout

  enhancement
  rossoctl/moca#439 · Filter by author pdettori opened on Oct 5, 2026

• setup-microvm.test.sh: make the attach-bound check deterministic (journal-call count, not elapsed time)

  enhancement
  rossoctl/moca#438 · Filter by author pdettori opened on Oct 5, 2026

• deploy/k8s: polish follow-ups from the slice 1 reviews

  enhancement
  rossoctl/moca#435 · Filter by author pdettori opened on Oct 4, 2026

• deploy/k8s, control plane, relay: small robustness follow-ups from the slice 1 reviews

  enhancement
  rossoctl/moca#434 · Filter by author pdettori opened on Oct 4, 2026

• deploy/k8s: test-strength follow-ups from the slice 1 reviews

  enhancement
  rossoctl/moca#433 · Filter by author pdettori opened on Oct 4, 2026

• deploy/k8s setup.sh --target ocp: combined trust file, trust line on every run, settable token TTLs

  enhancement
  rossoctl/moca#432 · Filter by author pdettori opened on Oct 4, 2026

• supervisor /metrics: per-connection hand-off counter, to make the OCP L4 (passthrough 1:1) check direct

  enhancement
  rossoctl/moca#430 · Filter by author pdettori opened on Oct 4, 2026

• deploy/k8s: kind and kind-ci share moca-settings, so kind keeps the kind-ci placeholder client id

  bug
  rossoctl/moca#429 · Filter by author pdettori opened on Oct 4, 2026

• Sandbox tier selection and session-to-sandbox affinity in selectPoolSandbox (P6-on-K8s slice 3)

  enhancement
  rossoctl/moca#425 · Filter by author pdettori opened on Oct 2, 2026

• P6 spec §5.2: amend E8 to its capacity and realism arms (moca half of moca-experiments#10)

  rossoctl/moca#421 · Filter by author pdettori opened on Oct 2, 2026
  1

• Session runtime 'turns' is never written, so every listing reports 0 turns

  rossoctl/moca#420 · Filter by author pdettori opened on Oct 2, 2026

• mocactl: show a turn's tool calls in a headless run (--show-tools)

  rossoctl/moca#419 · Filter by author pdettori opened on Oct 1, 2026

• deploy/vm: research-smoke.sh leaves its minted subject's empty record in the credential store

  rossoctl/moca#418 · Filter by author pdettori opened on Oct 1, 2026

• mocactl: the Sessions view shows only a session's first prompt, and 0 turns after a headless run

  rossoctl/moca#417 · Filter by author pdettori opened on Oct 1, 2026

• sandbox image: no git identity, so an agent's first git commit fails

  rossoctl/moca#415 · Filter by author pdettori opened on Oct 1, 2026

• deploy/vm: setup-vm.sh never pulls the sandbox image, so a host runs a stale :latest

  rossoctl/moca#414 · Filter by author pdettori opened on Oct 1, 2026
  1

• deploy/vm: setup-vm.sh re-run recreates sh-redis (no volume) and loses every session

  rossoctl/moca#410 · Filter by author pdettori opened on Sep 30, 2026

• Container worker: honour workspace_key with a per-session working directory

  rossoctl/moca#408 · Filter by author pdettori opened on Sep 30, 2026