registrystack/registry-stack

View on GitHub

Open-source registry infrastructure: Base Registry Engine, Evidence Gateway, protected read APIs, discovery, and portable metadata.

Stars: 2
Forks: 0
Open beginner issues: 0
Indexed issues: 154
Avg merge: 2h 57m
Merged PRs (30d): 128

Dominant language: Rust
License: Apache-2.0
Last GitHub push: Sep 15, 2026
Latest indexed: Sep 15, 2026
Contributing guide: Contributing guide
Code of conduct: Code of conduct
Beginner labels: good first issue

Open All

153 open issues indexed

Name the refused secret reference when a BReg source binding fails to build Open

area:casework enhancement

registrystack/registry-stack#990 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
caseworkctl check accepts a policy package whose manifest no longer matches Open

area:casework bug

registrystack/registry-stack#994 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
fix(casework): align runtime schema secret-reference validation Open

registrystack/registry-stack#998 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
bregctl dev delivers change-request events only to its own receiver Open

area:breg area:casework criticality:p3 enhancement

registrystack/registry-stack#1002 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Decide whether caseworkctl dev may share the bregctl dev PostgreSQL container Open

area:casework criticality:p3 enhancement needs-jeremi-decision

registrystack/registry-stack#1003 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
bregctl dev rehearsal refuses a bound dev client with extra scopes without naming the cause Open

agent-ready area:breg bug criticality:p3

registrystack/registry-stack#1004 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
casework serve: OIDC discovery against a loopback http issuer fails without naming the reason Open

agent-ready area:casework bug criticality:p3

registrystack/registry-stack#1005 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
caseworkctl doctor reports a generic failure without naming the failed check Open

agent-ready area:casework criticality:p3 enhancement

registrystack/registry-stack#1006 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 15, 2026
bregctl refuses symlinked destinations such as macOS /tmp without naming the symlink Open

agent-ready area:breg criticality:p3 enhancement

registrystack/registry-stack#1007 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Fix pre-existing shfmt drift in check-evidence-tutorials.sh Open

agent-ready area:docs criticality:p3 good first issue

registrystack/registry-stack#1014 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Casework: emit a signed event when a work item changes state Open

agent-ready area:casework criticality:p2 enhancement

registrystack/registry-stack#1017 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Expose the BReg webhook signature verifier in @registrystack/client Open

agent-ready area:breg area:platform criticality:p2 enhancement

registrystack/registry-stack#1018 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Decide whether BReg event destinations may carry a static authorization header Open

area:breg criticality:p3 enhancement needs-jeremi-decision

registrystack/registry-stack#1019 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Casework collapses every first-attempt BReg refusal into work-item.not-offered Open

agent-ready area:casework bug criticality:p3

registrystack/registry-stack#1020 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Node client ergonomics: transition by name, route selector, envelope helpers, action input translation Open

agent-ready area:breg area:casework criticality:p3 enhancement javascript rust

registrystack/registry-stack#1021 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Client docs: Node change-request example, immediate-action metadata, envelope shapes, caching, compatibility Open

agent-ready area:breg area:casework area:docs criticality:p3 documentation

registrystack/registry-stack#1022 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
caseworkctl init --template should publish its possible values Open

agent-ready area:casework criticality:p3 enhancement good first issue

registrystack/registry-stack#1025 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
caseworkctl source add should support non-empty flow-style accessProfiles Open

agent-ready area:casework criticality:p3 enhancement

registrystack/registry-stack#1026 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Shared authorization claims: add refusal tests and tighten the claims API Open

agent-ready area:platform criticality:p3

registrystack/registry-stack#1030 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Casework task grants: add refusal test coverage Open

agent-ready area:casework criticality:p3

registrystack/registry-stack#1031 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Evidence: unit tests for task grant matching and V1-I07 traceability Open

agent-ready area:evidence criticality:p3

registrystack/registry-stack#1032 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
BREG task grants: status client and authority refusal test coverage Open

agent-ready area:breg criticality:p3

registrystack/registry-stack#1033 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
BREG task grants: runtime guard on the batch path and two clarity fixes Open

agent-ready area:breg criticality:p3

registrystack/registry-stack#1034 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Native shard merge drops the v0.30.0 macOS Mint binary Open

agent-ready area:release criticality:p3

registrystack/registry-stack#1035 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
ThunderID tooling: refuse static human actor kind on machine clients, image pull timeout, test JWKS Open

agent-ready area:platform criticality:p2

registrystack/registry-stack#1036 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Remove remaining Mint names and wording after retirement Open

agent-ready area:docs area:evidence criticality:p3

registrystack/registry-stack#1037 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Measure the cost of task grant status checks Open

agent-ready area:breg area:casework criticality:p3 question

registrystack/registry-stack#1038 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Task grants: end-to-end refusal test through production wiring Open

agent-ready area:breg area:casework area:evidence criticality:p2

registrystack/registry-stack#1041 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
BREG: clippy fails with the runtime feature alone Open

agent-ready area:breg criticality:p3 rust

registrystack/registry-stack#1058 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
thunderid-tooling: a collision-free multi-segment scope no longer has a local representation Open

bug criticality:p2 rust

registrystack/registry-stack#1060 · 2 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
bregctl: prepare-source on a borrowed issuer silently skips owner registration Open

registrystack/registry-stack#1061 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
bregctl: issuer refresh renders browser secrets against an empty staging root Open

registrystack/registry-stack#1062 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
evidence-client-node: type the config exclusivity rules the runtime enforces Open

registrystack/registry-stack#1064 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Evidence: audit selector values sent for a grant-bound or context-bound subject Open

area:evidence criticality:p3 enhancement

registrystack/registry-stack#1072 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Token path diagnostics: BREG, the Casework BREG adapter and bregctl dev drop the refusal cause Open

area:breg area:casework criticality:p3 enhancement

registrystack/registry-stack#1076 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
bregctl dev stop: refuses while a failed start is still exiting instead of waiting Open

area:breg bug criticality:p3

registrystack/registry-stack#1078 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
bregctl dev: no way to find or prune containers and volumes of deleted projects Open

area:breg criticality:p3 enhancement

registrystack/registry-stack#1079 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
bregctl dev issuer sign-in page: disabled sign-up and recovery actions, marketing copy, console noise Open

area:breg area:platform criticality:p3 enhancement

registrystack/registry-stack#1080 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Casework docs: reconciliation interval is stated inconsistently and its effect on reads is not explained Open

area:casework area:docs criticality:p3 documentation needs-jeremi-decision

registrystack/registry-stack#1081 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
bregctl dev docs: issuer section constraints are only discoverable from refusals Open

area:breg area:docs criticality:p3 documentation

registrystack/registry-stack#1082 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
bregctl dev docs: contract for tools running beside a dev session and the dev issuer token shape Open

area:breg area:docs criticality:p3 documentation

registrystack/registry-stack#1083 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
bregctl dev token: issue a synthetic user token through an interactive application Open

area:breg criticality:p3 enhancement

registrystack/registry-stack#1084 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Release: Discovery ships only linux-amd64 binaries and no discoveryctl Open

area:discovery area:release criticality:p3 question

registrystack/registry-stack#1085 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
CI: Base Registry Engine tutorial job intermittently fails at first-breg fence 03 on an occupied local port Open

area:breg bug criticality:p3

registrystack/registry-stack#1088 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Per-package clippy for registry-casework fails on unused registry-breg evidence-retention code Open

area:breg bug criticality:p3 triage:needs-implementation

registrystack/registry-stack#1090 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
BReg docs: the restricted-field projection rule does not match the compiled classification ceiling Open

area:breg area:docs documentation

registrystack/registry-stack#1093 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Docs site: no page covers Casework task templates, task authority, or BReg agent access profiles Open

area:breg area:casework area:docs documentation

registrystack/registry-stack#1094 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
BREG task grants: a task-grant profile compiles with approve_request and apply_request in operations Open

area:breg bug rust

registrystack/registry-stack#1095 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Docs site: the OpenFn adaptors explanation is published in draft with an unresolved evidence TODO Open

area:docs documentation

registrystack/registry-stack#1096 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
BReg docs: assertionIssuers, the token exchange wire form, and the JWKS cache bounds are undocumented Open

area:breg area:docs documentation

registrystack/registry-stack#1097 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026

registrystack/registry-stack

Get new issues in your inbox