agent-substrate

[P2] Stale-worker release in AssignWorkerStep retry path is fire-and-forget — failure silently leaks worker slot Open

area/api-machinery area/scheduling kind/bug prio/P2

agent-substrate/substrate#622 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026

DeleteActor never cleans the actor's node directory Open

area/node kind/bug prio/P1

agent-substrate/substrate#641 · 3 comments · 0 reactions · 1 assignee · Indexed Sep 13, 2026

[P1] ateclient mints a single 1-hour bearer token and never refreshes it — long-lived clients go permanently Unauthenticated Open

area/api kind/bug prio/P1

agent-substrate/substrate#644 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 13, 2026

[P1] atenet-router and dns run as single replicas with no PDB — every restart is a guaranteed full data-plane outage Open

area/network kind/bug prio/P1

agent-substrate/substrate#645 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026

[P2] Transient atelet unavailability defaults to codes.Internal — outside the documented retryable set; strands actor in SUSPENDING and surfaces as http/500 Open

area/api-machinery area/network kind/bug prio/P2

agent-substrate/substrate#646 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026

Support restoring filesystem snapshot on top of full snapshot in gVisor. Open

area/gvisor kind/feature

agent-substrate/substrate#662 · 0 comments · 0 reactions · 1 assignee · Indexed Sep 13, 2026

Measure atenet-router request capacity Open

area/benchmarking area/network kind/design kind/feature

agent-substrate/substrate#665 · 1 comment · 0 reactions · 1 assignee · Indexed Sep 13, 2026

Identify what metrics we should use for HPA-based workerpool autoscaling Open

area/observability area/scheduling kind/design kind/feature

agent-substrate/substrate#671 · 4 comments · 0 reactions · 1 assignee · Indexed Sep 13, 2026

Separate identity that is given to an Actor from per-Actor identities use by Substrate infra Open

area/identity area/security kind/feature

agent-substrate/substrate#672 · 3 comments · 0 reactions · 1 assignee · Indexed Sep 13, 2026

ateom/atunnel: factor shared atunnel wiring into a common library Open

area/network kind/cleanup

agent-substrate/substrate#687 · 0 comments · 0 reactions · 1 assignee · Indexed Sep 13, 2026

atunnel: refresh client CA pool per handshake Open

area/network kind/feature

agent-substrate/substrate#688 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 13, 2026

atelet: node-local cache for golden snapshots (OnGolden data resumes re-download the golden every time) Open

area/storage kind/feature

agent-substrate/substrate#690 · 1 comment · 0 reactions · 1 assignee · Indexed Sep 13, 2026

Lazy suspension Open

area/scheduling kind/feature

agent-substrate/substrate#707 · 0 comments · 7 reactions · 0 assignees · Indexed Sep 13, 2026

TestActorSnapshotLifecycle test flake: failed to call cloned Actor Open

area/storage area/tests kind/bug prio/P0

agent-substrate/substrate#716 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026

Support runtime threat detection, auditing, and enforcement for Actors Open

area/security kind/feature

agent-substrate/substrate#725 · 0 comments · 0 reactions · 1 assignee · Indexed Sep 13, 2026

Actor Identity Broker can issue an mTLS certificate that identifies a particular atunnel acting on behalf of a particular caller. Open

area/identity kind/feature

agent-substrate/substrate#734 · 4 comments · 0 reactions · 1 assignee · Indexed Sep 13, 2026

OTLP exporters hardcode WithInsecure(), so the SDK's TLS config never applies Open

area/observability kind/feature prio/P0

agent-substrate/substrate#741 · 5 comments · 0 reactions · 1 assignee · Indexed Sep 13, 2026

Select devices per-container in the ActorTemplate Open

area/api area/gvisor area/node area/scheduling kind/feature

agent-substrate/substrate#752 · 11 comments · 0 reactions · 2 assignees · Indexed Sep 13, 2026

Move atenet to a native sidecar container Open

area/network kind/feature

agent-substrate/substrate#760 · 1 comment · 0 reactions · 1 assignee · Indexed Sep 13, 2026

Actor instrumented metrics might merge and inflate Open

area/observability kind/bug

agent-substrate/substrate#761 · 6 comments · 0 reactions · 1 assignee · Indexed Sep 13, 2026

GPU passthrough for micro-VM actors Open

area/microVM kind/feature

agent-substrate/substrate#762 · 4 comments · 0 reactions · 1 assignee · Indexed Sep 13, 2026

Remove onResume.fromData config and always use golden Open

area/scheduling kind/cleanup

agent-substrate/substrate#766 · 3 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026

Per-snapshot authorization Open

area/security area/storage kind/feature

agent-substrate/substrate#777 · 0 comments · 2 reactions · 0 assignees · Indexed Sep 13, 2026

Investigate replacing credential broker mTLS with per-worker UDS isolation Open

area/network area/node area/security kind/design kind/feature

agent-substrate/substrate#778 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026

Snapshot/restore for GPU actors (suspend/resume with a live CUDA context) Open

area/gvisor area/microVM kind/feature

agent-substrate/substrate#779 · 3 comments · 0 reactions · 1 assignee · Indexed Sep 13, 2026

Add ate.actors gauge Open

area/observability kind/feature

agent-substrate/substrate#796 · 33 comments · 0 reactions · 1 assignee · Indexed Sep 13, 2026

Opt-in durability instead of Pause vs Suspend API Open

area/api kind/feature

agent-substrate/substrate#798 · 2 comments · 4 reactions · 0 assignees · Indexed Sep 13, 2026

Fix flaky tests: e2e demo suite timeouts and syncer poll timeout Open

area/tests kind/bug

agent-substrate/substrate#799 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026

Add a SystemInfo volume source to ActorTemplate for delivering per-actor generated files Open

area/identity area/security kind/feature prio/P0

agent-substrate/substrate#802 · 4 comments · 0 reactions · 1 assignee · Indexed Sep 13, 2026

Cold-node gVisor release extract (~20s, silent, uncancellable) exceeds the router resume budget — first resume after a release bump always fails Open

area/gvisor kind/bug

agent-substrate/substrate#811 · 13 comments · 0 reactions · 1 assignee · Indexed Sep 13, 2026

Downstream K8s manifest-authoring gaps: ActorTemplate volumes, image pinning docs, cluster-scoped SandboxConfig discoverability, WorkerPool spread, valkey conf newline Open

area/api kind/feature

agent-substrate/substrate#819 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 13, 2026

Add an SDS server that mints a short-lived leaf per SNI on demand at handshake time Open

area/network kind/feature

agent-substrate/substrate#823 · 2 comments · 0 reactions · 1 assignee · Indexed Sep 13, 2026

Future of sh scripts Open

area/dev-infra kind/cleanup

agent-substrate/substrate#842 · 2 comments · 0 reactions · 1 assignee · Indexed Sep 13, 2026

atecontroller: health checks are registered but never served Open

area/api-machinery kind/bug

agent-substrate/substrate#843 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026

[Design] Actor Otel Telemetry Relay Open

area/observability kind/feature

agent-substrate/substrate#853 · 13 comments · 0 reactions · 1 assignee · Indexed Sep 13, 2026

Add DeleteOptions and honor version/uid preconditions on all Delete RPCs Open

area/api-machinery kind/feature

agent-substrate/substrate#866 · 0 comments · 0 reactions · 1 assignee · Indexed Sep 13, 2026

ImagePullSecrets in actor templates Open

area/api area/node kind/feature

agent-substrate/substrate#868 · 4 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026

Actor resource telemetry Phase 1: atelet reader and OTel emission Open

area/observability kind/feature prio/P0

agent-substrate/substrate#896 · 0 comments · 0 reactions · 1 assignee · Indexed Sep 13, 2026

Implement chain of authenticator mechanism in ate api server Open

area/api-machinery area/security kind/feature

agent-substrate/substrate#900 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 13, 2026

atenet/dns: actor zone returns NXDOMAIN for empty non-terminals Open

area/network kind/bug

agent-substrate/substrate#922 · 0 comments · 0 reactions · 1 assignee · Indexed Sep 13, 2026

Add trustBundle as a SystemInfo volume data source Open

area/api area/identity kind/feature prio/P0

agent-substrate/substrate#932 · 0 comments · 0 reactions · 1 assignee · Indexed Sep 13, 2026

atecontroller metrics are never scraped Open

area/observability kind/bug

agent-substrate/substrate#933 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 13, 2026

Design: Authorization in Substrate Open

area/security kind/feature

agent-substrate/substrate#936 · 2 comments · 0 reactions · 1 assignee · Indexed Sep 13, 2026

atunnel: egress listener accepts IPv6 connections it cannot route Open

area/network kind/bug

agent-substrate/substrate#943 · 0 comments · 0 reactions · 1 assignee · Indexed Sep 13, 2026

ateapi: the worker record stores a single pod IP, so dual-stack workers lose a family Open

area/api-machinery kind/bug

agent-substrate/substrate#944 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026

ateomnet: worker pod netns enables IPv4 forwarding only, dropping actor IPv6 traffic Open

area/network kind/bug

agent-substrate/substrate#945 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026

Actor network policy should support in-cluster service / ClusterIP like OpenTelemetry Collector endpoint Open

area/network kind/feature prio/P0

agent-substrate/substrate#960 · 1 comment · 0 reactions · 1 assignee · Indexed Sep 13, 2026

ContainerReadyz should include a timeout and maybe retry params Open

area/api area/node kind/feature

agent-substrate/substrate#963 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026

Adopt runsc --no-root-container to take sentry startup off the actor start path Open

area/gvisor kind/feature

agent-substrate/substrate#967 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 13, 2026

Start sandbox creation before the image pull / checkpoint download completes Open

area/node kind/feature

agent-substrate/substrate#968 · 2 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026

Get new issues in your inbox