rossoctl/rossoctl

Main rossoctl repo - installer, UI and docs

Stars: 302
Forks: 107
Open beginner issues: 0
Indexed issues: 108
Avg merge: 1d 16h
Merged PRs (30d): 41

Dominant language: Python
License: Apache-2.0
Last GitHub push: Sep 18, 2026
Latest indexed: Sep 20, 2026
Contributing guide: Contributing guide
Code of conduct: Code of conduct
Beginner labels: good first issue

Beginner friendly Everything

Open All

108 open issues indexed

feature: AIAC v0.8 MVP documentation on rossoctl.dev Open

documentation

rossoctl/rossoctl#2566 · 1 assignee · Opened Sep 16, 2026
feature: AIAC concept documentation on rossoctl.dev Open

documentation

rossoctl/rossoctl#2565 · 1 assignee · Opened Sep 16, 2026
CI: prompt-behavior (live-LLM) lane is not run in CI — elicitation regressions uncaught Open

enhancement

rossoctl/rossoctl#2563 · 1 assignee · Opened Sep 16, 2026
PRB: description-only user-role prohibitions lose durable denies after Door B removal (#2540) Open

enhancement

rossoctl/rossoctl#2562 · 1 comment · 1 assignee · Opened Sep 16, 2026
epic: Data governance release 0.8.1 Open

epic

rossoctl/rossoctl#2560 · 1 assignee · Opened Sep 15, 2026
feature: Guardrails validates digested policy; RAG stores the digest (revise out-of-band digestion) Open

enhancement

rossoctl/rossoctl#2559 · 1 assignee · Opened Sep 15, 2026
feature: Digest faithfulness checker (differential access-probe) Open

enhancement

Difficulty 5/5 Over a week Newbie friendliness 35/100

rossoctl/rossoctl#2556 · Opened Sep 14, 2026
feature: Standalone policy-digester unit (read → digest → store, serve digest to the flow) Open

enhancement

rossoctl/rossoctl#2555 · 1 assignee · Opened Sep 14, 2026
feature: Digest-layer authoring conflict detection (report + not-applied) Open

enhancement

rossoctl/rossoctl#2554 · 1 assignee · Opened Sep 14, 2026
Phase 5: Sunset the client-registration sidecar (remaining webhook injector paths) Open

enhancement Identity

rossoctl/rossoctl#2550 · 1 assignee · Opened Sep 10, 2026
Phase 4: Enable federated SPIFFE client authentication by default (RHBK 26.6.x unblocked) Open

enhancement Identity

rossoctl/rossoctl#2549 · 1 assignee · Opened Sep 10, 2026
ci: Required check "Deploy & Test" never reports on docs-only PRs, blocking merge Open

bug infrastructure

Difficulty 3/5 1-2 days Newbie friendliness 78/100

rossoctl/rossoctl#2548 · Opened Sep 10, 2026
epic: Serverless Harness density experiments — multi-tenancy isolation + microVM sandbox Open

epic high priority

rossoctl/rossoctl#2546 · 1 assignee · Opened Sep 9, 2026
feature: Digested-policy eval — parity + improvement Open

enhancement

rossoctl/rossoctl#2541 · 1 assignee · Opened Sep 9, 2026
epic: Digested access-control policy — template, conversion, and rule generation Open

epic

rossoctl/rossoctl#2537 · 1 assignee · Opened Sep 9, 2026
feature: Policy drift detection demo — intent vs. actual access Open

enhancement

rossoctl/rossoctl#2535 · 1 assignee · Opened Sep 9, 2026
feature: End-to-end onboarding demo — intent to derived rules to live enforcement Open

enhancement

rossoctl/rossoctl#2534 · 2 assignees · Opened Sep 9, 2026
epic: AIAC Capability Demo — Intent-to-Enforcement and Drift Detection Open

epic

rossoctl/rossoctl#2533 · 2 assignees · Opened Sep 9, 2026
epic: AIAC Knowledge Base & Platform Integration Open

epic

Difficulty 5/5 Over a week Newbie friendliness 20/100

rossoctl/rossoctl#2532 · Opened Sep 9, 2026
:bug: Fail to clone on Win11 Open

kind/bug

Difficulty 2/5 1-3 hours Newbie friendliness 68/100

rossoctl/rossoctl#2531 · Opened Sep 9, 2026
docs: guard against Ollama model-name drift in demo docs (source of truth in rossoctl/examples) Open

Difficulty 4/5 3-5 days Newbie friendliness 48/100

rossoctl/rossoctl#2527 · 1 comment · Opened Sep 8, 2026
Weekly Report 2026-09-07 Open

Difficulty 1/5 Under an hour Newbie friendliness 15/100

rossoctl/rossoctl#2526 · Opened Sep 7, 2026
epic: Local Cortex proxy — cost reduction & real-time plugin measurements Open

epic high priority

rossoctl/rossoctl#2514 · 3 assignees · Opened Sep 3, 2026
epic: Design a serverless Harness solution for Rossoctl Open

epic high priority

rossoctl/rossoctl#2513 · 2 assignees · Opened Sep 2, 2026
task: Follow-up polish from #842 review — from_conflicts constructor + retire-banner doc holdover Open

enhancement good first issue

rossoctl/rossoctl#2512 · 1 assignee · Opened Sep 2, 2026
epic: Event Identity demo (Kubecon 2026) Open

epic

rossoctl/rossoctl#2506 · 3 comments · 1 assignee · Opened Aug 31, 2026
Deleting an agent's Sandbox/Deployment without its AgentRuntime CR leaves the operator in a reconcile error loop Open

Difficulty 4/5 3-5 days Newbie friendliness 48/100

rossoctl/rossoctl#2490 · Opened Aug 28, 2026
E2E Testing: Operator SPIFFE Authentication (go-spiffe SDK) Open

Difficulty 4/5 3-5 days Newbie friendliness 15/100

rossoctl/rossoctl#2482 · Opened Aug 27, 2026
Task: Avoid double IdP catalog fetch in policy-conflict check (#154) Open

Difficulty 3/5 1-2 days Newbie friendliness 78/100

rossoctl/rossoctl#2476 · Opened Aug 26, 2026
Follow-up: Persist default_effect on ServicePolicyModel (durability across re-derivation) Open

enhancement

rossoctl/rossoctl#2475 · 1 assignee · Opened Aug 26, 2026
:bug: Broken link in README.md: https://rossoctl.dev/ Open

Difficulty 1/5 Under an hour Newbie friendliness 75/100

rossoctl/rossoctl#2474 · 2 comments · Opened Aug 26, 2026
feature: Model version pinning and initial dual-tier selection run Open

rossoctl/rossoctl#2473 · 2 assignees · Opened Aug 26, 2026
feature: Improvement-recommendations section in the eval report Open

rossoctl/rossoctl#2472 · 2 assignees · Opened Aug 26, 2026
feature: Keycloak-fidelity periodic check Open

rossoctl/rossoctl#2471 · 2 assignees · Opened Aug 26, 2026
feature: Scale suite — exploratory breaking-point tier Open

rossoctl/rossoctl#2470 · 2 assignees · Opened Aug 26, 2026
feature: Scale suite — fixed-100 regression tier Open

rossoctl/rossoctl#2469 · 2 assignees · Opened Aug 26, 2026
feature: Consistency suite — 5x reproducibility gate and trend reporting Open

rossoctl/rossoctl#2468 · 2 assignees · Opened Aug 26, 2026
feature: Robustness suite — semantic tier with human sign-off Open

rossoctl/rossoctl#2467 · 2 assignees · Opened Aug 26, 2026
feature: Robustness suite — mechanical tier (invariance and sensitivity families) Open

rossoctl/rossoctl#2466 · 2 assignees · Opened Aug 26, 2026
Constrain path params in the remaining 11 routers (py/log-injection surface beyond #2395) Open

rossoctl/rossoctl#2457 · 1 assignee · Opened Aug 21, 2026
tx-e2e SPIFFE token-exchange: standard-TE audience authorization ("Requested audience not available") Open

Difficulty 4/5 3-5 days Newbie friendliness 45/100

rossoctl/rossoctl#2455 · Opened Aug 21, 2026
docs: clean up ~45 pre-existing broken relative links Open

kind/bug

Difficulty 4/5 3-5 days Newbie friendliness 48/100

rossoctl/rossoctl#2449 · 2 comments · Opened Aug 20, 2026
:bug: Tokens returned by Kind Keycloak lack a Subject Open

kind/bug

Difficulty 3/5 1-2 days Newbie friendliness 55/100

rossoctl/rossoctl#2446 · 1 comment · Opened Aug 20, 2026
E2E tests bypass Istio gateway - should test production routing path Open

rossoctl/rossoctl#2367 · 2 comments · 1 assignee · Opened Aug 11, 2026
Istio ambient mode certificates expired without automatic rotation Open

bug

Difficulty 4/5 3-5 days Newbie friendliness 38/100

rossoctl/rossoctl#2362 · Opened Aug 11, 2026
Excluding deployment support for Kuadrant MCP Gateway until that is needed again Open

rossoctl/rossoctl#2360 · 1 assignee · Opened Aug 10, 2026
Helm ConfigMap ownership conflicts with operator reconciliation Open

Difficulty 4/5 3-5 days Newbie friendliness 38/100

rossoctl/rossoctl#2350 · 1 comment · Opened Aug 6, 2026
Agent-to-agent authorization: topology allowlist + Istio ambient identity (blocked on ADR-0003/MultiAgent) Open

enhancement Identity

Difficulty 5/5 Over a week Newbie friendliness 25/100

rossoctl/rossoctl#2331 · Opened Jul 31, 2026
:bug: Update backend for MCP 2.0.0 Open

kind/bug

rossoctl/rossoctl#2312 · 2 comments · 1 assignee · Opened Jul 28, 2026
doc: Recommendation — adopt agent-sandbox extensions vs wait (epic exit) Open

enhancement

rossoctl/rossoctl#2308 · 1 assignee · Opened Jul 28, 2026

A short digest of beginner-friendly GitHub issues.