achisolomon/software-factory

Issues somebody may already be working on are listed last. List everything by date

• T-021: Eval grader Nits from T-012 reviews

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel

  Difficulty 3/5 1-2 days Newbie friendliness 55/100

  achisolomon/software-factory#142 · Opened Nov 2, 2026

• T-019: Ignore .software-factory-withheld/ in a project's ignore rules

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel

  Difficulty 2/5 1-3 hours Newbie friendliness 55/100

  achisolomon/software-factory#141 · Opened Nov 2, 2026

• Minor(security): T-014 fix round 1 ssh scanning misses --, -tp clusters, -o RemoteCommand/ProxyCommand/LocalCommand, stdin, su -c

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  enhancement

  Difficulty 4/5 3-5 days Newbie friendliness 35/100

  achisolomon/software-factory#129 · 2 comments · Opened Nov 2, 2026

• Minor(security): public-repo exception binds only the explorer; Security and Architect filing can still disclose (T-011, SR-09)

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel

  Difficulty 3/5 Half a day Newbie friendliness 35/100

  achisolomon/software-factory#126 · 1 comment · Opened Nov 2, 2026

• tests/test_hooks.py VersionCheckTests not hermetic: 2 failures from ambient state

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel

  Difficulty 2/5 1-3 hours Newbie friendliness 62/100

  achisolomon/software-factory#125 · 1 comment · Opened Nov 2, 2026

• T-010: exploratory agent instructions contradict or leave fallbacks open

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel

  Difficulty 3/5 1-2 days Newbie friendliness 40/100

  achisolomon/software-factory#124 · 2 comments · Opened Nov 2, 2026

• T-010: test_agent_files.py phrase checks do not pin Must rules (mutations survive)

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel

  Difficulty 3/5 Half a day Newbie friendliness 35/100

  achisolomon/software-factory#122 · 2 comments · Opened Nov 2, 2026

• Minor(security): shared-env exploratory approval not a section 11 gate (T-011, SR-06)

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel

  Difficulty 2/5 1-3 hours Newbie friendliness 70/100

  achisolomon/software-factory#121 · 2 comments · Opened Nov 2, 2026

• Major(security): quarantine carve-out can hide a failing security test (T-011)

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel

  Difficulty 4/5 3-5 days Newbie friendliness 25/100

  achisolomon/software-factory#120 · 4 comments · Opened Nov 2, 2026

• Major(security): security-class exploratory findings can reach the Architect or a public issue (T-011, SR-09)

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel

  Difficulty 3/5 Half a day Newbie friendliness 35/100

  achisolomon/software-factory#119 · 3 comments · Opened Nov 2, 2026

• Minor(test): T-014 gate gaps vs design text, adjacent destructive shapes, origin lookup timeout

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel

  Difficulty 4/5 3-5 days Newbie friendliness 20/100

  achisolomon/software-factory#118 · 2 comments · Opened Nov 2, 2026

• Major(test): T-014 DB writes on a remote host hidden behind ssh compound strings

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel

  Difficulty 4/5 3-5 days Newbie friendliness 25/100

  achisolomon/software-factory#117 · 2 comments · Opened Nov 2, 2026

• Major(test): T-014 ephemeral client containers and docker exec -e PGHOST reach remote DBs unchecked

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel

  Difficulty 4/5 3-5 days Newbie friendliness 22/100

  achisolomon/software-factory#116 · 2 comments · Opened Nov 2, 2026

• Major(test): T-014 gh api full-URL endpoint bypasses the other-repo rule

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel

  Difficulty 3/5 Half a day Newbie friendliness 35/100

  achisolomon/software-factory#115 · 2 comments · Opened Nov 2, 2026

• minor(agents): Team Lead explorer trigger text conflicts with on request and sits in the per-task loop

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel

  Difficulty 1/5 Under an hour Newbie friendliness 62/100

  achisolomon/software-factory#114 · 2 comments · Opened Nov 2, 2026

• minor(agents): quarantine can hide real failures, no expiry, owner or cap

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel

  Difficulty 3/5 1-2 days Newbie friendliness 35/100

  achisolomon/software-factory#113 · 3 comments · Opened Nov 2, 2026

• minor(tests): quarantine phrase checks do not guard the flaky-skip or guard rules

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel

  Difficulty 2/5 1-3 hours Newbie friendliness 62/100

  achisolomon/software-factory#112 · 2 comments · Opened Nov 2, 2026

• Major(test): T-014 psql --dbname=URI and -dURI forms bypass the remote-host check

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel

  Difficulty 2/5 1-3 hours Newbie friendliness 62/100

  achisolomon/software-factory#111 · 2 comments · Opened Nov 2, 2026

• T-014 review (Minor): false-positive asks on gh checkout/search and DB names in paths

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel

  Difficulty 2/5 1-3 hours Newbie friendliness 70/100

  achisolomon/software-factory#109 · 2 comments · Opened Nov 2, 2026

• T-014 review (Minor): cache the origin lookup and pass one env object to the gate rules

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel

  Difficulty 3/5 1-2 days Newbie friendliness 45/100

  achisolomon/software-factory#108 · 2 comments · Opened Nov 2, 2026

• T-014 review (Minor): mongosh bare positional is a local db name, not a host

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel

  Difficulty 2/5 1-3 hours Newbie friendliness 72/100

  achisolomon/software-factory#107 · 2 comments · Opened Nov 2, 2026

• T-014 review (Minor): PGHOSTADDR with -h, and hook-env GH_REPO/DOCKER_HOST, are not read

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel

  Difficulty 3/5 Half a day Newbie friendliness 50/100

  achisolomon/software-factory#106 · 2 comments · Opened Nov 2, 2026

• Minor(security): gate has no rule for prisma reset, remote curl DELETE, firebase database:set, docker run psql, docker rm -v

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  enhancement

  Difficulty 3/5 1-2 days Newbie friendliness 60/100

  achisolomon/software-factory#105 · 1 comment · Opened Nov 2, 2026

• T-014 review (Major): gh writes to the project's own repo ask from a multi-repo workspace root

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel

  Difficulty 3/5 Half a day Newbie friendliness 42/100

  achisolomon/software-factory#103 · 2 comments · Opened Nov 2, 2026

• T-014 review (Major): docker run, docker compose run and kubectl run skip the DB client check

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel

  Difficulty 2/5 1-3 hours Newbie friendliness 76/100

  achisolomon/software-factory#99 · 2 comments · Opened Nov 2, 2026

• T-014 review (Major): psql --dbname=URI and -dURI forms skip the host check

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel

  Difficulty 2/5 1-3 hours Newbie friendliness 80/100

  achisolomon/software-factory#98 · 2 comments · Opened Nov 2, 2026

• minor(team-lead): shipped prompt cites design-internal SR-06; rosters miss the explorer

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  bug

  Difficulty 1/5 Under an hour Newbie friendliness 78/100

  achisolomon/software-factory#97 · 2 comments · Opened Nov 2, 2026

• minor(test-engineer): quarantine default form and un-quarantine step contradict the flaky and guard rules

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  bug

  Difficulty 1/5 Under an hour Newbie friendliness 62/100

  achisolomon/software-factory#96 · 3 comments · Opened Nov 2, 2026

• minor(test-engineer): quarantine examples use wrong APIs (Vitest test.fails, unittest skipUnless reason)

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  bug

  Difficulty 1/5 Under an hour Newbie friendliness 82/100

  achisolomon/software-factory#95 · 2 comments · Opened Nov 2, 2026

• major(team-lead): explorer findings get no skeptic that reruns the repro test (G6)

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  bug

  Difficulty 2/5 1-3 hours Newbie friendliness 72/100

  achisolomon/software-factory#94 · 2 comments · Opened Nov 2, 2026

• Minor(T-010): no commit branch or message, and no QUARANTINE marker form under local tracking

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  bug

  Difficulty 1/5 Under an hour Newbie friendliness 78/100

  achisolomon/software-factory#90 · 2 comments · Opened Nov 2, 2026

• Minor(T-010): security detail sent 'through the reply', and 'a minimal issue or none' is undecided

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  bug

  Difficulty 2/5 1-3 hours Newbie friendliness 35/100

  achisolomon/software-factory#88 · 2 comments · Opened Nov 2, 2026

• Minor(T-010): 'stop every background process before you return' conflicts with in-progress hand-back

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  bug

  Difficulty 1/5 Under an hour Newbie friendliness 55/100

  achisolomon/software-factory#85 · 2 comments · Opened Nov 2, 2026

• Minor(T-010): write-target rule reads as absolute but a shared env is allowed with approval

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  bug

  Difficulty 1/5 Under an hour Newbie friendliness 72/100

  achisolomon/software-factory#84 · 2 comments · Opened Nov 2, 2026

• Minor(T-010): code-access trigger is one failing run, not a confirmed finding

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  bug

  Difficulty 1/5 Under an hour Newbie friendliness 62/100

  achisolomon/software-factory#83 · 2 comments · Opened Nov 2, 2026

• Major(T-010): uncommitted security repro test is deleted by the scratch cleanup rule

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  bug

  Difficulty 2/5 1-3 hours Newbie friendliness 42/100

  achisolomon/software-factory#82 · 2 comments · Opened Nov 2, 2026

• Minor(security): T-014 hook rules miss same-command env loading, SELECT side effects, gh api paths, remote exec

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  enhancement

  Difficulty 4/5 3-5 days Newbie friendliness 18/100

  achisolomon/software-factory#79 · 1 comment · Opened Nov 2, 2026

• Minor(test): T-014 test table skips parser branches (host sources, wrappers, gh forms)

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel

  Difficulty 4/5 3-5 days Newbie friendliness 25/100

  achisolomon/software-factory#78 · 1 comment · Opened Nov 2, 2026

• Major(test): T-014 gh api rule cannot see literal other-repo paths

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel

  Difficulty 4/5 3-5 days Newbie friendliness 30/100

  achisolomon/software-factory#77 · 1 comment · Opened Nov 2, 2026

• T-014: Gate hook asks on remote DB, volume, firebase delete and other-repo gh

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  enhancement

  Difficulty 4/5 3-5 days Newbie friendliness 22/100

  achisolomon/software-factory#76 · Opened Nov 2, 2026

• Minor(security): explorer memory may store connection strings or environment approvals (T-010)

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  enhancement

  Difficulty 2/5 1-3 hours Newbie friendliness 42/100

  achisolomon/software-factory#73 · Opened Nov 2, 2026

• Minor(security): refusal eval covers only the named-staging case (T-012)

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  enhancement

  Difficulty 3/5 1-2 days Newbie friendliness 45/100

  achisolomon/software-factory#72 · Opened Nov 2, 2026

• Minor(security): shared-environment approval has no source or scope rule (T-010, T-011)

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  enhancement

  Difficulty 3/5 Half a day Newbie friendliness 35/100

  achisolomon/software-factory#71 · Opened Nov 2, 2026

• Major(security): npx e2e is unpinned and sends app screenshots to a model provider (T-010, T-013)

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  enhancement

  Difficulty 4/5 1-2 days Newbie friendliness 18/100

  achisolomon/software-factory#70 · 1 comment · Opened Nov 2, 2026

• Major(security): no prompt-injection rule for app output the explorer reads (T-010, T-011)

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  enhancement

  Difficulty 3/5 1-2 days Newbie friendliness 30/100

  achisolomon/software-factory#69 · 1 comment · Opened Nov 2, 2026

• Major(security): explorer would publish security bugs with repro steps in public issues (T-010, T-011)

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  enhancement

  Difficulty 3/5 Half a day Newbie friendliness 35/100

  achisolomon/software-factory#68 · 3 comments · Opened Nov 2, 2026

• Major(security): explorer evidence (traces, responses, logs) can leak secrets into public issues (T-010)

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  enhancement

  Difficulty 3/5 1-2 days Newbie friendliness 45/100

  achisolomon/software-factory#67 · 1 comment · Opened Nov 2, 2026

• Major(security): gate hook does not ask before destructive DB, docker volume or remote-DB commands

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  enhancement

  Difficulty 4/5 3-5 days Newbie friendliness 25/100

  achisolomon/software-factory#66 · 2 comments · Opened Nov 2, 2026

• Major(security): explorer has no scope rule for destructive DB and volume resets (T-010)

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  enhancement

  Difficulty 3/5 Half a day Newbie friendliness 42/100

  achisolomon/software-factory#65 · 1 comment · Opened Nov 2, 2026

• Major(security): explorer environment gate trusts labels, not the actual write target (T-010)

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  enhancement

  Difficulty 4/5 3-5 days Newbie friendliness 25/100

  achisolomon/software-factory#64 · 1 comment · Opened Nov 2, 2026