DobermanCore/Doberman-Core

Issues somebody may already be working on are listed last. List everything by date

• [P3] test(openclaw): Prove approvals are single-use and action-bound

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  posthog

  Difficulty 2/5 1-3 hours Newbie friendliness 78/100

  DobermanCore/Doberman-Core#791 · Opened Nov 8, 2026

  Maintainers usually reply within 3 days

• [P3] Three wizard dashboard insights reference inactive events

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  posthog

  Difficulty 5/5 Over a week Newbie friendliness 25/100

  DobermanCore/Doberman-Core#789 · Opened Oct 30, 2026

  Maintainers usually reply within 3 days

• [P2] fix(auth): Make the stale TOTP step-lock takeover atomic

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  posthog

  Difficulty 3/5 1-2 days Newbie friendliness 76/100

  DobermanCore/Doberman-Core#786 · Opened Oct 27, 2026

  Maintainers usually reply within 3 days

• [P2] fix(rules): Escalate gitignored deletes in .gitkeep-anchored directories

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  posthog

  Difficulty 3/5 1-2 days Newbie friendliness 74/100

  DobermanCore/Doberman-Core#785 · Opened Oct 27, 2026

  Maintainers usually reply within 3 days

• rules: the .gitkeep layout never escalates a gitignored delete

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  level-6

  Difficulty 2/5 1-3 hours Newbie friendliness 82/100

  DobermanCore/Doberman-Core#782 · 1 comment · Opened Oct 27, 2026

  Maintainers usually reply within 3 days

• auth: two processes can both take over a stale TOTP used-step lock

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  level-5

  Difficulty 3/5 1-2 days Newbie friendliness 77/100

  DobermanCore/Doberman-Core#781 · 1 comment · Opened Oct 27, 2026

  Maintainers usually reply within 3 days

• [P1] fix(rules): Catch HEAD, glob, mirror-config, and send-pack protected pushes

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  posthog

  Difficulty 4/5 3-5 days Newbie friendliness 55/100

  DobermanCore/Doberman-Core#766 · Opened Oct 19, 2026

  Maintainers usually reply within 3 days

• [P2] fix(sinks): Log only the webhook host on WebhookAuditSink POST failures

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  posthog

  Difficulty 2/5 1-3 hours Newbie friendliness 80/100

  DobermanCore/Doberman-Core#767 · Opened Oct 19, 2026

  Maintainers usually reply within 3 days

• [P2] feat(rules): Run dependency admission on dlx, bunx, uvx, and uv tool run

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  posthog

  Difficulty 4/5 1-2 days Newbie friendliness 54/100

  DobermanCore/Doberman-Core#765 · Opened Oct 19, 2026

  Maintainers usually reply within 3 days

• rules: protected-branch push checks miss HEAD refspecs, globs, remote mirror config and send-pack

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  enhancement level-6 security

  Difficulty 4/5 3-5 days Newbie friendliness 55/100

  DobermanCore/Doberman-Core#762 · Opened Oct 18, 2026

  Maintainers usually reply within 3 days

• policy: a failed ledger write after an approved loosening still applies the change

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  enhancement level-6 security

  Difficulty 4/5 1-2 days Newbie friendliness 43/100

  DobermanCore/Doberman-Core#761 · Opened Oct 18, 2026

  Maintainers usually reply within 3 days

• rules: pnpm dlx, yarn dlx, bunx, uvx and uv tool run skip dependency admission

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  enhancement level-5

  Difficulty 3/5 1-2 days Newbie friendliness 78/100

  DobermanCore/Doberman-Core#760 · Opened Oct 18, 2026

  Maintainers usually reply within 3 days

• [P3] feat(observability): add coverage for telemetry_enabled

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  posthog

  Difficulty 5/5 Over a week Newbie friendliness 25/100

  DobermanCore/Doberman-Core#698 · Opened Sep 10, 2026

  Maintainers usually reply within 3 days

• [P3] fix(web analytics): configure authorized URLs

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  posthog

  Difficulty 4/5 3-5 days Newbie friendliness 25/100

  DobermanCore/Doberman-Core#683 · Opened Sep 8, 2026

  Maintainers usually reply within 3 days

• [P2] Authorization outcomes are silent for active CLI traffic

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  posthog

  Difficulty 4/5 3-5 days Newbie friendliness 48/100

  DobermanCore/Doberman-Core#684 · Opened Sep 8, 2026

  Maintainers usually reply within 3 days

• Score the hook-config scanner against the HookPry artifact set as an operator-supplied suite

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  level-4 roadmap

  Difficulty 5/5 Over a week Newbie friendliness 35/100

  DobermanCore/Doberman-Core#670 · Opened Sep 7, 2026

  Maintainers usually reply within 3 days

• Optional injection-classifier detector extra for untrusted tool output (AUTH-capped)

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  level-8 roadmap

  Difficulty 5/5 Over a week Newbie friendliness 38/100

  DobermanCore/Doberman-Core#669 · Opened Sep 7, 2026

  Maintainers usually reply within 3 days

• Wire BIPIA (email and table indirect prompt injection) as an operator-supplied external suite

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  level-5 roadmap

  Difficulty 4/5 3-5 days Newbie friendliness 54/100

  DobermanCore/Doberman-Core#668 · Opened Sep 7, 2026

  Maintainers usually reply within 3 days

• Hook ledger: record every lifecycle hook command the host runs and scan it with the shell rules

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  level-7 roadmap

  Difficulty 5/5 Over a week Newbie friendliness 35/100

  DobermanCore/Doberman-Core#667 · Opened Sep 7, 2026

  Maintainers usually reply within 3 days

• benchmarks: follow-ups from the external suites run (RedCode-Exec, MSB, LLMail-Inject)

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  enhancement level-6

  Difficulty 4/5 3-5 days Newbie friendliness 42/100

  DobermanCore/Doberman-Core#644 · Opened Sep 6, 2026

  Maintainers usually reply within 3 days

• engine: per-session circuit breaker, repeated BLOCKs or denials tighten the rest of the session

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  enhancement level-7 roadmap

  Difficulty 5/5 Over a week Newbie friendliness 35/100

  DobermanCore/Doberman-Core#643 · Opened Sep 6, 2026

  Maintainers usually reply within 3 days

• engine: honeytoken tripwire, a planted credential whose use anywhere is a confirmatory BLOCK

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  enhancement level-7 roadmap

  Difficulty 5/5 Over a week Newbie friendliness 35/100

  DobermanCore/Doberman-Core#642 · Opened Sep 6, 2026

  Maintainers usually reply within 3 days

• egress: DNS lookups can carry data out, and strict mode has no BLOCK for high-entropy egress

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  enhancement level-7 roadmap

  Difficulty 4/5 3-5 days Newbie friendliness 48/100

  DobermanCore/Doberman-Core#641 · Opened Sep 6, 2026

  Maintainers usually reply within 3 days

• egress: decide whether a runtime broker can ship on by default

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  level-9 roadmap security

  Difficulty 5/5 Over a week Newbie friendliness 35/100

  DobermanCore/Doberman-Core#640 · Opened Sep 6, 2026

  Maintainers usually reply within 3 days

• engine: run the adaptive layer on the host-hook path through a warm background process

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  enhancement level-8 roadmap

  Difficulty 5/5 Over a week Newbie friendliness 35/100

  DobermanCore/Doberman-Core#639 · Opened Sep 6, 2026

  Maintainers usually reply within 3 days

• hosthooks: a registered egress broker is only consulted on the MCP proxy path

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  enhancement level-5

  Difficulty 3/5 1-2 days Newbie friendliness 69/100

  DobermanCore/Doberman-Core#637 · Opened Sep 6, 2026

  Maintainers usually reply within 3 days

• doctor: a replaced or PATH-shadowed doberman binary is not detected

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  enhancement level-7 security

  Difficulty 4/5 3-5 days Newbie friendliness 58/100

  DobermanCore/Doberman-Core#636 · Opened Sep 6, 2026

  Maintainers usually reply within 3 days

• engine: the objective/rule layer (T0/T1) has no engine-enforced authority ceiling

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  level-9 security

  Difficulty 5/5 Over a week Newbie friendliness 15/100

  DobermanCore/Doberman-Core#630 · Opened Sep 5, 2026

  Maintainers usually reply within 3 days

• engine: Windows backslash normalization flips a whole matched line, not per-segment

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  enhancement level-7

  Difficulty 4/5 3-5 days Newbie friendliness 45/100

  DobermanCore/Doberman-Core#628 · Opened Sep 5, 2026

  Maintainers usually reply within 3 days

• C15 judge follow-ups (each its own slice; the advisory rung needs an ADR narrowing ADR 0029)

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  level-8 roadmap

  Difficulty 5/5 Over a week Newbie friendliness 20/100

  DobermanCore/Doberman-Core#559 · Opened Sep 3, 2026

  Maintainers usually reply within 3 days

• storage: a retention-policy record with enforcement proof for the decision log

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  enhancement level-4

  Difficulty 4/5 3-5 days Newbie friendliness 45/100

  DobermanCore/Doberman-Core#511 · Opened Aug 30, 2026

  Maintainers usually reply within 3 days

• Make the algebra version real: stamp ALGEBRA_VERSION, persist the classified algebra per decision, fail conservative on mismatch

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  enhancement level-7 roadmap

  Difficulty 4/5 3-5 days Newbie friendliness 45/100

  DobermanCore/Doberman-Core#424 · Opened Aug 20, 2026

  Maintainers usually reply within 3 days

• subjective: decay stale revealed-preference weights toward the declared preset

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  enhancement level-7 roadmap

  Difficulty 5/5 Over a week Newbie friendliness 38/100

  DobermanCore/Doberman-Core#410 · Opened Aug 18, 2026

  Maintainers usually reply within 3 days

• Prove parity cell: approvals single-use and action-bound on OpenClaw

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  good first challenge level-4 parity

  Difficulty 3/5 1-2 days Newbie friendliness 68/100

  DobermanCore/Doberman-Core#407 · 1 comment · Opened Aug 18, 2026

  Maintainers usually reply within 3 days

• Codex host fails open when its own hook layer crashes: detect, document, contain

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  bug good first challenge level-5

  Difficulty 4/5 3-5 days Newbie friendliness 48/100

  DobermanCore/Doberman-Core#335 · Opened Aug 11, 2026

  Maintainers usually reply within 3 days

• qa: live-test the secret-egress taint floor under Codex with neutral phrasing

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  good first issue help wanted level-2

  Difficulty 2/5 1-3 hours Newbie friendliness 68/100

  DobermanCore/Doberman-Core#333 · Opened Aug 11, 2026

  Maintainers usually reply within 3 days

• serve.py's initialize/handshake dependency is a version-gated breaking change under MCP 2026-07-28 (SEP-2575)

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  level-6

  Difficulty 4/5 3-5 days Newbie friendliness 38/100

  DobermanCore/Doberman-Core#300 · Opened Aug 8, 2026

  Maintainers usually reply within 3 days

• qa: a guided tour of the new UX - put seven fresh improvements through their paces (no code required)

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  good first issue help wanted level-2

  Difficulty 2/5 1-3 hours Newbie friendliness 84/100

  DobermanCore/Doberman-Core#272 · Opened Aug 6, 2026

  Maintainers usually reply within 3 days

• research: what does a screen reader announce for the AUTH approval dialog?

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  help wanted level-4

  Difficulty 3/5 1-2 days Newbie friendliness 72/100

  DobermanCore/Doberman-Core#260 · Opened Aug 6, 2026

  Maintainers usually reply within 3 days

• Basic ambient collectors: inline tailer + validated JSONL drop-in, with docs/AMBIENT.md (FM.3)

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  enhancement level-5 roadmap

  Difficulty 4/5 3-5 days Newbie friendliness 48/100

  DobermanCore/Doberman-Core#238 · Opened Aug 3, 2026

  Maintainers usually reply within 3 days

• Optional [perplexity] extra: reference windowed scorer for the statistical OOD channel (OT.4)

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  enhancement good first challenge level-6 roadmap

  Difficulty 4/5 3-5 days Newbie friendliness 45/100

  DobermanCore/Doberman-Core#235 · Opened Aug 3, 2026

  Maintainers usually reply within 3 days

• adapter: guard another agent harness (Aider / Cursor / Continue / generic MCP)

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  enhancement help wanted level-7

  Difficulty 4/5 3-5 days Newbie friendliness 48/100

  DobermanCore/Doberman-Core#202 · 2 comments · Opened Jul 30, 2026

  Maintainers usually reply within 3 days

• tui: design + build a live-tail mode for the decision-log browser

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  enhancement level-7

  Difficulty 5/5 Over a week Newbie friendliness 25/100

  DobermanCore/Doberman-Core#201 · 1 comment · Opened Jul 30, 2026

  Maintainers usually reply within 3 days

• chore: add a pre-commit config (ruff + lint-imports)

  May be free again @jonah-boop claimed this 82 days ago, and no pull request is open. Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  enhancement good first issue level-2

  Difficulty 2/5 1-3 hours Newbie friendliness 84/100

  DobermanCore/Doberman-Core#195 · 5 comments · Opened Jul 30, 2026

  Maintainers usually reply within 3 days

• Cryptographically signed, append-only decision log + policy ledger

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  enhancement help wanted level-10 roadmap

  DobermanCore/Doberman-Core#146 · 6 comments · 1 assignee · Opened Jul 22, 2026

  Maintainers usually reply within 3 days

• Passkeys / WebAuthn as a stronger local 2FA tier

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  enhancement help wanted level-10 roadmap

  Difficulty 5/5 Over a week Newbie friendliness 35/100

  DobermanCore/Doberman-Core#145 · Opened Jul 22, 2026

  Maintainers usually reply within 3 days

• policy: a corrupt policies.yaml lets an ungated save raise the approval TTL to 300

  Possibly taken @jasperdingg claimed this 21 days ago. Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  bug level-4 security

  Difficulty 3/5 1-2 days Newbie friendliness 75/100

  DobermanCore/Doberman-Core#759 · 1 comment · Opened Oct 18, 2026

  Maintainers usually reply within 3 days

• rules: deleting tests from the shell (rm, git rm) passes with no check

  Possibly taken @harmehak0173 claimed this 21 days ago. Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  enhancement level-5

  Difficulty 3/5 1-2 days Newbie friendliness 76/100

  DobermanCore/Doberman-Core#647 · 1 comment · 1 assignee · Opened Sep 6, 2026

  Maintainers usually reply within 3 days

• rules: npx, npm exec and pipx run skip the dependency-admission check

  Possibly taken @harmehak0173 claimed this 21 days ago. Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  enhancement level-5

  Difficulty 3/5 1-2 days Newbie friendliness 78/100

  DobermanCore/Doberman-Core#645 · 1 comment · 1 assignee · Opened Sep 6, 2026

  Maintainers usually reply within 3 days

• decision log: stamp the policy version on every decision and surface the matching

  Possibly taken @thesageak claimed this 69 days ago. Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  enhancement level-4 roadmap

  DobermanCore/Doberman-Core#515 · 4 comments · 1 assignee · Opened Aug 31, 2026

  Maintainers usually reply within 3 days