Issues

• [SECURITY] add_reaction authenticates but never authorizes (write-side IDOR)

  guardyn/guardyn#402 · Filter by author anrysys opened on Sep 25, 2026

• No RPC can rotate or re-publish an ML-KEM pre-key for an existing device

  guardyn/guardyn#362 · Filter by author anrysys opened on Sep 22, 2026

• deriveHybridSharedSecret ignores its ML-KEM argument and does plain X25519

  guardyn/guardyn#360 · Filter by author anrysys opened on Sep 22, 2026

• PR-98e · Record what actually closes I-3 and correct the documents that predate PR-98

  type:docs
  guardyn/guardyn#356 · Filter by author anrysys opened on Sep 22, 2026 · Phase 4 — Post-Quantum & Launch

• PR-98d · client-mobile negotiates hybrid PQXDH as initiator

  type:feat
  guardyn/guardyn#355 · Filter by author anrysys opened on Sep 22, 2026 · Phase 4 — Post-Quantum & Launch

• PR-129 · The prod overlay does not render: base/monitoring has no kustomization.yaml

  type:fix
  guardyn/guardyn#339 · Filter by author anrysys opened on Sep 20, 2026 · Phase 4 — Post-Quantum & Launch

• PR-128 · Rename the guardyn.io label keys at the next cluster rebuild

  type:chore
  guardyn/guardyn#338 · Filter by author anrysys opened on Sep 20, 2026 · Phase 4 — Post-Quantum & Launch

• PR-127 · Retire the legacy guardyn.io security contact

  type:security
  guardyn/guardyn#337 · Filter by author anrysys opened on Sep 20, 2026 · Phase 4 — Post-Quantum & Launch

• PR-126 · Publish the guardyn.co PGP keys and add the Encryption field

  type:security
  guardyn/guardyn#336 · Filter by author anrysys opened on Sep 20, 2026 · Phase 4 — Post-Quantum & Launch

• PR-118 · Automate the PQ-WIRE predicate in rules-verify

  type:security
  guardyn/guardyn#324 · Filter by author anrysys opened on Sep 14, 2026 · Phase 4 — Post-Quantum & Launch

• PR-117 · client-desktop commands/tests.rs is never compiled and cannot compile

  type:fix
  guardyn/guardyn#323 · Filter by author anrysys opened on Sep 14, 2026 · Phase 4 — Post-Quantum & Launch

• Fix GIT-BUDGET script predicate to strictly enforce AGENTS.md budget rules

  type:chore
  guardyn/guardyn#321 · Filter by author anrysys opened on Sep 14, 2026

• PR-113 · Address messages to a specific device and fan out per device

  type:feat
  guardyn/guardyn#295 · Filter by author anrysys opened on Sep 13, 2026 · Phase 4 — Post-Quantum & Launch

• PR-112 · clear_crypto_state leaves ratchets and parked prekeys in memory

  type:security
  guardyn/guardyn#294 · Filter by author anrysys opened on Sep 13, 2026 · Phase 4 — Post-Quantum & Launch

• PR-102 · MLS key packages are stored under a hardcoded device_id of default

  type:fix
  guardyn/guardyn#272 · Filter by author anrysys opened on Sep 12, 2026 · Phase 4 — Post-Quantum & Launch

• PR-83 · Clear the 314 flutter analyze info diagnostics

  type:chore
  guardyn/guardyn#268 · Filter by author anrysys opened on Sep 12, 2026 · Phase 3 — Architectural Scaffolding & ZK Hardening

• PR-100 · Add known-answer vectors for the sealed sender wire format

  type:security
  guardyn/guardyn#264 · Filter by author anrysys opened on Sep 12, 2026 · Phase 4 — Post-Quantum & Launch

• PR-99 · One-time pre-key ids break at TiKV lexicographic index >= 10

  type:fix
  guardyn/guardyn#263 · Filter by author anrysys opened on Sep 12, 2026 · Phase 4 — Post-Quantum & Launch

• PR-96 · kube-bootstrap races the cert-manager webhook CA and fails intermittently

  type:fix
  guardyn/guardyn#257 · Filter by author anrysys opened on Sep 11, 2026 · Phase 4 — Post-Quantum & Launch

• PR-94 · client-desktop SecureStorage is not partitioned per account

  type:security
  guardyn/guardyn#253 · Filter by author anrysys opened on Sep 11, 2026 · Phase 4 — Post-Quantum & Launch

• PR-93 · GetKeyBundle never consumes the one-time pre-key it serves

  type:security
  guardyn/guardyn#246 · Filter by author anrysys opened on Sep 11, 2026 · Phase 4 — Post-Quantum & Launch

• PR-91 · Generate docs/INDEX.md and the tokens: counts

  type:feat
  guardyn/guardyn#241 · Filter by author anrysys opened on Sep 11, 2026 · Phase 4 — Post-Quantum & Launch

• group_chat_page_test renders a replica of the page, not the page

  darttype:fix
  guardyn/guardyn#235 · Filter by author anrysys opened on Sep 11, 2026 · Phase 3 — Architectural Scaffolding & ZK Hardening

• Add an FFI-backed mobile CI job

  darttype:chore
  guardyn/guardyn#211 · Filter by author anrysys opened on Sep 10, 2026 · Phase 3 — Architectural Scaffolding & ZK Hardening

• Build Linux flakes in linuxdeploy when bundling the AppImage

  type:fix
  guardyn/guardyn#199 · Filter by author anrysys opened on Sep 9, 2026 · Phase 3 — Architectural Scaffolding & ZK Hardening