All issues

RUSTSEC-2026-0285: TLS 1.3 handshake messages incorrectly accepted across encryption level boundaries

#1065

· github-actions opened

on Sep 15, 2026

Attestation: publish a verifiable model-to-deployment binding

#1063

· hanakannzashi opened

on Sep 14, 2026

E2EE: authenticate the client response key in the request

#1061

· hanakannzashi opened

on Sep 14, 2026

[Cloud Staging] Verify cleanup behavior for abandoned PingPay payments in Payment History

#1060

· sunglow666 opened

on Sep 14, 2026

An independent offline verifier for cloud-api attestation reports and signed completions

#1058

· tomjwxf opened

on Sep 12, 2026

POST /v1/users/me/access-tokens returns a zero-byte 401, indistinguishable from sending no credential

#1057

· sergeiest opened

on Sep 11, 2026

Usage Reporting API (usage/summary, usage/export) is documented but not deployed — rpt- reporting tokens are inert

#1056

· sergeiest opened

on Sep 11, 2026

OAuth callback: cancelled/failed logins land on raw API errors and leave orphaned oauth_states rows

#1054

· thisisjoshford opened

on Sep 11, 2026

Google sign-in skips account chooser after sign-out (missing prompt=select_account)

#1053

· thisisjoshford opened

on Sep 11, 2026

[Cloud Staging] Qwen3.7 Max usage metering intermittently missing for successful requests

#1052

· sunglow666 opened

on Sep 11, 2026

[Cloud Staging] Gemini 3.1 Flash Lite accepts image_url requests but does not pass the image to the model

#1051

· sunglow666 opened

on Sep 11, 2026

Migrate Cloud API to two new hosts with UpToDate TCB

#1039

· hanakannzashi opened

on Sep 10, 2026