-
Notifications
You must be signed in to change notification settings - Fork 0
All issues
Issue creation is restricted in this repository
Issues
is:issue state:open
is:issue state:open
Search results
[CCA-410] Add reproducible v0.1 release assets, SBOM, checksums, and attestations
area:releaseReproducible release assets and deferred release governance.Reproducible release assets and deferred release governance.blockedBlocked by explicitly listed dependencies or human prerequisites.Blocked by explicitly listed dependencies or human prerequisites.human-gateContains a decision or authorization that only an accountable human may make.Contains a decision or authorization that only an accountable human may make.priority:p2Later v0.1 work gated by prior validation and human decisions.Later v0.1 work gated by prior validation and human decisions.risk:highRequires heightened security review and explicit human judgment.Requires heightened security review and explicit human judgment.type:taskA bounded implementation or validation task with one branch and one Draft PR.A bounded implementation or validation task with one branch and one Draft PR.Status: Open.#19 In itdojp/crypto-communications-assurance; ·v0.1 — Contracts, domain pack, bridges, corpus, and internal pilot[CCA-520] Publish a bounded efficacy and limitations report
area:docsOperator documentation, claims, limitations, and reports.Operator documentation, claims, limitations, and reports.area:pilotAuthorized internal report-only pilot planning and execution.Authorized internal report-only pilot planning and execution.blockedBlocked by explicitly listed dependencies or human prerequisites.Blocked by explicitly listed dependencies or human prerequisites.human-gateContains a decision or authorization that only an accountable human may make.Contains a decision or authorization that only an accountable human may make.priority:p2Later v0.1 work gated by prior validation and human decisions.Later v0.1 work gated by prior validation and human decisions.risk:highRequires heightened security review and explicit human judgment.Requires heightened security review and explicit human judgment.type:taskA bounded implementation or validation task with one branch and one Draft PR.A bounded implementation or validation task with one branch and one Draft PR.Status: Open.#18 In itdojp/crypto-communications-assurance; ·v0.1 — Contracts, domain pack, bridges, corpus, and internal pilot[CCA-510] Run the first authorized internal report-only pilot
area:pilotAuthorized internal report-only pilot planning and execution.Authorized internal report-only pilot planning and execution.blockedBlocked by explicitly listed dependencies or human prerequisites.Blocked by explicitly listed dependencies or human prerequisites.human-gateContains a decision or authorization that only an accountable human may make.Contains a decision or authorization that only an accountable human may make.priority:p2Later v0.1 work gated by prior validation and human decisions.Later v0.1 work gated by prior validation and human decisions.risk:highRequires heightened security review and explicit human judgment.Requires heightened security review and explicit human judgment.type:taskA bounded implementation or validation task with one branch and one Draft PR.A bounded implementation or validation task with one branch and one Draft PR.Status: Open.#17 In itdojp/crypto-communications-assurance; ·v0.1 — Contracts, domain pack, bridges, corpus, and internal pilot[CCA-420] Publish the operator runbook, claim boundaries, and known limitations
area:docsOperator documentation, claims, limitations, and reports.Operator documentation, claims, limitations, and reports.blockedBlocked by explicitly listed dependencies or human prerequisites.Blocked by explicitly listed dependencies or human prerequisites.human-gateContains a decision or authorization that only an accountable human may make.Contains a decision or authorization that only an accountable human may make.priority:p1Important v0.1 work after its declared dependencies are satisfied.Important v0.1 work after its declared dependencies are satisfied.risk:highRequires heightened security review and explicit human judgment.Requires heightened security review and explicit human judgment.type:taskA bounded implementation or validation task with one branch and one Draft PR.A bounded implementation or validation task with one branch and one Draft PR.Status: Open.#16 In itdojp/crypto-communications-assurance; ·v0.1 — Contracts, domain pack, bridges, corpus, and internal pilot[CCA-330] Add pinned compatibility tests for ae-framework and GenAI Repo Auditor
area:ae-integrationArtifacts and compatibility boundaries for ae-framework integration.Artifacts and compatibility boundaries for ae-framework integration.area:ciContinuous integration, policy validation, and compatibility checks.Continuous integration, policy validation, and compatibility checks.area:gra-integrationAudit-context and evidence boundaries for GenAI Repo Auditor integration.Audit-context and evidence boundaries for GenAI Repo Auditor integration.blockedBlocked by explicitly listed dependencies or human prerequisites.Blocked by explicitly listed dependencies or human prerequisites.human-gateContains a decision or authorization that only an accountable human may make.Contains a decision or authorization that only an accountable human may make.priority:p1Important v0.1 work after its declared dependencies are satisfied.Important v0.1 work after its declared dependencies are satisfied.risk:highRequires heightened security review and explicit human judgment.Requires heightened security review and explicit human judgment.type:taskA bounded implementation or validation task with one branch and one Draft PR.A bounded implementation or validation task with one branch and one Draft PR.Status: Open.#15 In itdojp/crypto-communications-assurance; ·v0.1 — Contracts, domain pack, bridges, corpus, and internal pilot[CCA-320] Implement the cryptocomm-assure local CLI
area:cliLocal command-line interface and operator-facing commands.Local command-line interface and operator-facing commands.blockedBlocked by explicitly listed dependencies or human prerequisites.Blocked by explicitly listed dependencies or human prerequisites.human-gateContains a decision or authorization that only an accountable human may make.Contains a decision or authorization that only an accountable human may make.priority:p1Important v0.1 work after its declared dependencies are satisfied.Important v0.1 work after its declared dependencies are satisfied.risk:highRequires heightened security review and explicit human judgment.Requires heightened security review and explicit human judgment.type:taskA bounded implementation or validation task with one branch and one Draft PR.A bounded implementation or validation task with one branch and one Draft PR.Status: Open.#14 In itdojp/crypto-communications-assurance; ·v0.1 — Contracts, domain pack, bridges, corpus, and internal pilot[CCA-310] Build a positive and negative synthetic cryptographic-communications corpus
area:fixturesSynthetic fixtures, corpora, and deterministic test data.Synthetic fixtures, corpora, and deterministic test data.blockedBlocked by explicitly listed dependencies or human prerequisites.Blocked by explicitly listed dependencies or human prerequisites.human-gateContains a decision or authorization that only an accountable human may make.Contains a decision or authorization that only an accountable human may make.priority:p1Important v0.1 work after its declared dependencies are satisfied.Important v0.1 work after its declared dependencies are satisfied.risk:highRequires heightened security review and explicit human judgment.Requires heightened security review and explicit human judgment.type:taskA bounded implementation or validation task with one branch and one Draft PR.A bounded implementation or validation task with one branch and one Draft PR.Status: Open.#13 In itdojp/crypto-communications-assurance; ·v0.1 — Contracts, domain pack, bridges, corpus, and internal pilot[CCA-230] Define the GenAI-Repo-Auditor-to-ae candidate-evidence bridge
area:ae-integrationArtifacts and compatibility boundaries for ae-framework integration.Artifacts and compatibility boundaries for ae-framework integration.area:bridgeData-only bridges between bounded tools and evidence domains.Data-only bridges between bounded tools and evidence domains.area:gra-integrationAudit-context and evidence boundaries for GenAI Repo Auditor integration.Audit-context and evidence boundaries for GenAI Repo Auditor integration.blockedBlocked by explicitly listed dependencies or human prerequisites.Blocked by explicitly listed dependencies or human prerequisites.human-gateContains a decision or authorization that only an accountable human may make.Contains a decision or authorization that only an accountable human may make.priority:p1Important v0.1 work after its declared dependencies are satisfied.Important v0.1 work after its declared dependencies are satisfied.risk:highRequires heightened security review and explicit human judgment.Requires heightened security review and explicit human judgment.type:taskA bounded implementation or validation task with one branch and one Draft PR.A bounded implementation or validation task with one branch and one Draft PR.Status: Open.#12 In itdojp/crypto-communications-assurance; ·v0.1 — Contracts, domain pack, bridges, corpus, and internal pilot[CCA-220] Define the ae-to-GenAI-Repo-Auditor audit-context bridge
area:bridgeData-only bridges between bounded tools and evidence domains.Data-only bridges between bounded tools and evidence domains.area:gra-integrationAudit-context and evidence boundaries for GenAI Repo Auditor integration.Audit-context and evidence boundaries for GenAI Repo Auditor integration.codex-readyDependencies are satisfied and the issue is ready for bounded agent work.Dependencies are satisfied and the issue is ready for bounded agent work.human-gateContains a decision or authorization that only an accountable human may make.Contains a decision or authorization that only an accountable human may make.priority:p1Important v0.1 work after its declared dependencies are satisfied.Important v0.1 work after its declared dependencies are satisfied.risk:highRequires heightened security review and explicit human judgment.Requires heightened security review and explicit human judgment.type:taskA bounded implementation or validation task with one branch and one Draft PR.A bounded implementation or validation task with one branch and one Draft PR.Status: Open.#11 In itdojp/crypto-communications-assurance; ·v0.1 — Contracts, domain pack, bridges, corpus, and internal pilot[CCA-210] Generate ae-framework-native assurance artifacts
area:ae-integrationArtifacts and compatibility boundaries for ae-framework integration.Artifacts and compatibility boundaries for ae-framework integration.codex-readyDependencies are satisfied and the issue is ready for bounded agent work.Dependencies are satisfied and the issue is ready for bounded agent work.human-gateContains a decision or authorization that only an accountable human may make.Contains a decision or authorization that only an accountable human may make.priority:p1Important v0.1 work after its declared dependencies are satisfied.Important v0.1 work after its declared dependencies are satisfied.risk:highRequires heightened security review and explicit human judgment.Requires heightened security review and explicit human judgment.type:taskA bounded implementation or validation task with one branch and one Draft PR.A bounded implementation or validation task with one branch and one Draft PR.Status: Open.#10 In itdojp/crypto-communications-assurance; ·v0.1 — Contracts, domain pack, bridges, corpus, and internal pilot[CCA-115] Harden GitHub Actions policy validation for job permissions and dangerous triggers
area:ciContinuous integration, policy validation, and compatibility checks.Continuous integration, policy validation, and compatibility checks.codex-readyDependencies are satisfied and the issue is ready for bounded agent work.Dependencies are satisfied and the issue is ready for bounded agent work.human-gateContains a decision or authorization that only an accountable human may make.Contains a decision or authorization that only an accountable human may make.priority:p1Important v0.1 work after its declared dependencies are satisfied.Important v0.1 work after its declared dependencies are satisfied.risk:highRequires heightened security review and explicit human judgment.Requires heightened security review and explicit human judgment.type:taskA bounded implementation or validation task with one branch and one Draft PR.A bounded implementation or validation task with one branch and one Draft PR.Status: Open.#6 In itdojp/crypto-communications-assurance; ·v0.1 — Contracts, domain pack, bridges, corpus, and internal pilot[CCA-100] Epic: Deliver v0.1 contracts, domain pack, ae/GRA bridges, and synthetic corpus
human-gateContains a decision or authorization that only an accountable human may make.Contains a decision or authorization that only an accountable human may make.priority:p0Highest roadmap priority; blocks foundational v0.1 work.Highest roadmap priority; blocks foundational v0.1 work.type:epicCoordinates multiple roadmap issues without combining their implementation.Coordinates multiple roadmap issues without combining their implementation.Status: Open.#4 In itdojp/crypto-communications-assurance; ·v0.1 — Contracts, domain pack, bridges, corpus, and internal pilot