dashboard shows the account's current tier, limits and recent 429s
dashboard shows the account's current tier, limits and recent 429s port Payer Funnel Optimization activation work (////) to staging, resolving / backup-restore-drill trusted contract pin lacks backup contract v4 (from ) production cloud provider base+database PITR restore drill leads core — crm_leads, activity log, admin + agent API, email intake
New Features
16dashboard shows the account's current tier, limits and recent 429s
dashboard shows the account's current tier, limits and recent 429s
port Payer Funnel Optimization activation work (////) to staging, resolving /
port Payer Funnel Optimization activation work (////) to staging, resolving /
production cloud provider base+database PITR restore drill
production cloud provider base+database PITR restore drill
leads core — crm_leads, activity log, admin + agent API, email intake
leads core — crm_leads, activity log, admin + agent API, email intake
both-host installed-generation/cadence/freshness activation observer
both-host installed-generation/cadence/freshness activation observer
persist per-job scheduler execution state and freshness
persist per-job scheduler execution state and freshness
report settlement discrepancies through existing incident plane
report settlement discrepancies through existing incident plane
extend settlement invariants to parent/child operations
extend settlement invariants to parent/child operations
visibility and alerting for Cloudflare 1015 on authenticated API traffic
visibility and alerting for Cloudflare 1015 on authenticated API traffic
record impersonation profile/engine per attempt and A/B Firefox-vs-Chrome vendor routing ( premise refuted)
record impersonation profile/engine per attempt and A/B Firefox-vs-Chrome vendor routing ( premise refuted)
per-model OpenRouter spend metrics and non-free spend alert — key exhaustion is only visible after the fact
per-model OpenRouter spend metrics and non-free spend alert — key exhaustion is only visible after the fact
sync mail provider Sent folder into lead/ticket timelines + overdue digest
sync mail provider Sent folder into lead/ticket timelines + overdue digest
CRM leads UI — list, stage board, lead activity timeline
CRM leads UI — list, stage board, lead activity timeline
follow-up: (deferred from )
follow-up: (deferred from )
DB-backed inbound review queue with ticket/lead/ignore actions
DB-backed inbound review queue with ticket/lead/ignore actions
wire internal service/AI engine inventory rows to execution freshness
wire internal service/AI engine inventory rows to execution freshness
Improvements
1remaining scheduled whole-ledger scans on credit_ledger (deferred from )
remaining scheduled whole-ledger scans on credit_ledger (deferred from )
Bug Fixes
144backup-restore-drill trusted contract pin lacks backup contract v4 (from )
backup-restore-drill trusted contract pin lacks backup contract v4 (from )
learning quality gate + quarantine — 19k learnings, 0 applied, 30% raw JSON, high-confidence claims contradicted by job data
learning quality gate + quarantine — 19k learnings, 0 applied, 30% raw JSON, high-confidence claims contradicted by job data
follow-up: 7 deferred item(s) (deferred from )
follow-up: 7 deferred item(s) (deferred from )
from-email 500 retry storm — reply guard never fires; thread lookup raises MultipleResultsFound
from-email 500 retry storm — reply guard never fires; thread lookup raises MultipleResultsFound
domain-deferral alerts still page on single-customer failing-domain bursts ( follow-up)
domain-deferral alerts still page on single-customer failing-domain bursts ( follow-up)
page and own local structure marker refresh and LIST recovery reads
page and own local structure marker refresh and LIST recovery reads
classify dead-origin failures under their real error_code and keep them out of tier success/failure attribution
classify dead-origin failures under their real error_code and keep them out of tier success/failure attribution
T1/T3 hash-selected stale chrome profiles still send sub-floor UA (review finding — )
T1/T3 hash-selected stale chrome profiles still send sub-floor UA (review finding — )
multi-way clusters strand slug redirects (cluster winners + re-point on unpublish)
multi-way clusters strand slug redirects (cluster winners + re-point on unpublish)
genuine HTTP 404s escalate to T4 since (92% of 404 failures, ~26s each) — no definitive-origin exit
genuine HTTP 404s escalate to T4 since (92% of 404 failures, ~26s each) — no definitive-origin exit
follow-up: 3 deferred item(s) (deferred from )
follow-up: 3 deferred item(s) (deferred from )
fail-closed required-monitoring readiness in deploy/hotfix status
fail-closed required-monitoring readiness in deploy/hotfix status
Staging Review: Fastly envelope-only match classifies any generic Varnish 403 JSON as terminal FASTLY_IP_BLOCK (staging → main)
Staging Review: Fastly envelope-only match classifies any generic Varnish 403 JSON as terminal FASTLY_IP_BLOCK (staging → main)
89% of published blog posts teach SDK/API code that does not exist
89% of published blog posts teach SDK/API code that does not exist
repin production-action chain to budget_holder session fix (, )
repin production-action chain to budget_holder session fix (, )
prod internal tooling llm_extraction.model overrides WORKER_LLM_MODEL default with no allowlist check (review finding — )
prod internal tooling llm_extraction.model overrides WORKER_LLM_MODEL default with no allowlist check (review finding — )
Firefox own-property userAgent/vendor overrides removed; playwright_stealth 1.0.6 prototype getters then throw ReferenceError opts is not defined on Playwright 1.60 (review finding — )
Firefox own-property userAgent/vendor overrides removed; playwright_stealth 1.0.6 prototype getters then throw ReferenceError opts is not defined on Playwright 1.60 (review finding — )
honour Retry-After with jitter and a max wait
honour Retry-After with jitter and a max wait
dispatch job-creation rate must match the advertised RPM; separate write and read dimensions
dispatch job-creation rate must match the advertised RPM; separate write and read dimensions
WAF deploy fails loudly, nightly live-vs-repo drift audit, contract test edge >= max entitlement
WAF deploy fails loudly, nightly live-vs-repo drift audit, contract test edge >= max entitlement
demand-gated topic selection and an anti-detection content pillar (current generators mostly failing)
demand-gated topic selection and an anti-detection content pillar (current generators mostly failing)
no managed/JS challenges on keyed API traffic; cover /v1/* in API expressions
no managed/JS challenges on keyed API traffic; cover /v1/* in API expressions
T4 soft_block flags parked pages and real 404s, defaulting to ip_rep and triggering proxy rerolls
T4 soft_block flags parked pages and real 404s, defaulting to ip_rep and triggering proxy rerolls
blog view counter counts ISR regenerations, not readers (shown publicly, drives popular posts)
blog view counter counts ISR regenerations, not readers (shown publicly, drives popular posts)
negative-cache Amazon location-cookie failures and re-check cache under lock
negative-cache Amazon location-cookie failures and re-check cache under lock
near-duplicate blog posts — paired pSEO generators, 20-title window, 0.85 similarity gate
near-duplicate blog posts — paired pSEO generators, 20-title window, 0.85 similarity gate
advanced browser Firefox context user_agent overrides T4 engine-identity prefs: UA major 135 vs engine, Linux identity UA vs Windows oscpu/appVersion prefs (review finding — )
advanced browser Firefox context user_agent overrides T4 engine-identity prefs: UA major 135 vs engine, Linux identity UA vs Windows oscpu/appVersion prefs (review finding — )
Deploy: hotfix-deploy parity and cloud provider deploy safety checks
Deploy: hotfix-deploy parity and cloud provider deploy safety checks
Re-run attempts include carried-over attempt-1 jobs so critical path and stage durations are inflated (run 33847724058: 7526s vs 4332s actual) (review finding — )
Re-run attempts include carried-over attempt-1 jobs so critical path and stage durations are inflated (run 33847724058: 7526s vs 4332s actual) (review finding — )
T4 non-advanced browser contexts send single-tag Accept-Language contradicting navigator.languages
T4 non-advanced browser contexts send single-tag Accept-Language contradicting navigator.languages
UA pool refresh left 12 of 18 entries as 2023-24 Firefox/Safari/iOS UAs so about two thirds of draws are stale (review finding — )
UA pool refresh left 12 of 18 entries as 2023-24 Firefox/Safari/iOS UAs so about two thirds of draws are stale (review finding — )
Roundup title month is taken from newest merge so a first-Monday run is mislabelled and can collide with the 30d key, skipping a month (review finding — )
Roundup title month is taken from newest merge so a first-Monday run is mislabelled and can collide with the 30d key, skipping a month (review finding — )
T4 spoofed navigator/screen values are own properties (advanced browser L2 also non-configurable and deletes Navigator.prototype.webdriver)
T4 spoofed navigator/screen values are own properties (advanced browser L2 also non-configurable and deletes Navigator.prototype.webdriver)
residual DB budget exhaustion 503s POST /scrape under 15-concurrent burst after
residual DB budget exhaustion 503s POST /scrape under 15-concurrent burst after
small genuine JSON responses rejected as soft_block_waf_block
small genuine JSON responses rejected as soft_block_waf_block
bare certificate marker routes TLS alert rejects to T4 without telemetry (review finding - )
bare certificate marker routes TLS alert rejects to T4 without telemetry (review finding - )
Google organic referrals down 52% since July and analytics blind spots
Google organic referrals down 52% since July and analytics blind spots
resource filter misses Amazon telemetry and ex.co hosts due to label-boundary matching
resource filter misses Amazon telemetry and ex.co hosts due to label-boundary matching
transient resolver failures (EAI_AGAIN) treated as terminal dead origin (review finding - )
transient resolver failures (EAI_AGAIN) treated as terminal dead origin (review finding - )
race-leg attempt bound to leg-1 proxy identity (review finding - )
race-leg attempt bound to leg-1 proxy identity (review finding - )
scrape_search_sub job insert omits organization_id (review finding — )
scrape_search_sub job insert omits organization_id (review finding — )
Edge UA pairs reduced Chrome/MAJOR.0.0.0 with full-build Edg/ token (review finding — )
Edge UA pairs reduced Chrome/MAJOR.0.0.0 with full-build Edg/ token (review finding — )
paid-success SLO 24h probe uses 10s statement_timeout and aborts the whole check (review finding — )
paid-success SLO 24h probe uses 10s statement_timeout and aborts the whole check (review finding — )
customer and monitoring system status paths can move merged tickets out of merged (review finding — )
customer and monitoring system status paths can move merged tickets out of merged (review finding — )
cloud provider-health worker CPU outlier alert triggers on one container-stats sample against a 50% floor
cloud provider-health worker CPU outlier alert triggers on one container-stats sample against a 50% floor
lease-budget gauges go stale silently when cache status is unavailable (review finding — )
lease-budget gauges go stale silently when cache status is unavailable (review finding — )
owner-only entitlement SQL only substring-tested, never executed against database (review finding — )
owner-only entitlement SQL only substring-tested, never executed against database (review finding — )
30d SLA availability and downtime-budget panels count unmeasured time as healthy
30d SLA availability and downtime-budget panels count unmeasured time as healthy
pg cache-hit alert reports an all-time heap-only ratio and misattributes it to shared_buffers
pg cache-hit alert reports an all-time heap-only ratio and misattributes it to shared_buffers
crawl depth-wave spend reservation leaks when coordinator task is cancelled (review finding — )
crawl depth-wave spend reservation leaks when coordinator task is cancelled (review finding — )
skip resolve_proxy_ip live lookups only where the IP check cannot change the outcome
skip resolve_proxy_ip live lookups only where the IP check cannot change the outcome
support inbound poll re-fetches the same 50 mail provider messages every 2 minutes
support inbound poll re-fetches the same 50 mail provider messages every 2 minutes
cache AOF warning threshold of 512MB is below the steady-state AOF size of a healthy ~465MB dataset
cache AOF warning threshold of 512MB is below the steady-state AOF size of a healthy ~465MB dataset
billing mail with model route=ignore is skipped for non-account senders (review finding — )
billing mail with model route=ignore is skipped for non-account senders (review finding — )
container memory warning counts database page cache as usage and cannot distinguish growth from steady state
container memory warning counts database page cache as usage and cannot distinguish growth from steady state
error-route landing asserted as non-bot without evidence and ahead of WAF detectors (review finding - )
error-route landing asserted as non-bot without evidence and ahead of WAF detectors (review finding - )
obs-monitor shim and sudoers grant not installed or verified by delivery path (review finding — )
obs-monitor shim and sudoers grant not installed or verified by delivery path (review finding — )
settlement checker reads jobs, ledger and usage in separate READ COMMITTED snapshots (review finding — )
settlement checker reads jobs, ledger and usage in separate READ COMMITTED snapshots (review finding — )
V4-pinned restore drill rejects V3-produced lane generations until the first post-deploy backup (review finding — )
V4-pinned restore drill rejects V3-produced lane generations until the first post-deploy backup (review finding — )
incident spool forwarder head-of-line blocks on a persistently failing oldest entry (review finding — )
incident spool forwarder head-of-line blocks on a persistently failing oldest entry (review finding — )
aging-critical internal tooling handoff never persists on memos with a damaged lifecycle block, so @Staff is re-paged every 5 minutes
aging-critical internal tooling handoff never persists on memos with a damaged lifecycle block, so @Staff is re-paged every 5 minutes
obs-monitor redaction misses credential-bearing non-http URIs and bare API keys (review finding — )
obs-monitor redaction misses credential-bearing non-http URIs and bare API keys (review finding — )
degraded internal tooling auto-close silently no-ops on same-day closed memo (review finding — )
degraded internal tooling auto-close silently no-ops on same-day closed memo (review finding — )
replacement drain in close_all can get zero budget and race the close loop (review finding — )
replacement drain in close_all can get zero budget and race the close loop (review finding — )
classify_all swallows classifier exceptions as unknown and reports healthy (review finding — )
classify_all swallows classifier exceptions as unknown and reports healthy (review finding — )
custom configuration isolated fallback context pairs identity UA/headers with hard-coded Win32 Chrome JS browser compatibility (review finding — )
custom configuration isolated fallback context pairs identity UA/headers with hard-coded Win32 Chrome JS browser compatibility (review finding — )
heartbeat consumer flags in-flight `started` jobs and clock-skewed fresh jobs as failures
heartbeat consumer flags in-flight `started` jobs and clock-skewed fresh jobs as failures
log-monitor internal service job metrics always report 0 ok / 0 failed and queue depth counts dead drafts
log-monitor internal service job metrics always report 0 ok / 0 failed and queue depth counts dead drafts
phantom-bot protection system hybrid sends Chrome headers on a firefox135 TLS profile (review finding — )
phantom-bot protection system hybrid sends Chrome headers on a firefox135 TLS profile (review finding — )
RSI validator accepts self-attested owner_approval for disablement (review finding — )
RSI validator accepts self-attested owner_approval for disablement (review finding — )
cloud provider storage retention prunes without re-verifying the older kept generation (noticed in review of )
cloud provider storage retention prunes without re-verifying the older kept generation (noticed in review of )
owner-lease cache GET in _db_update_build_result can drop the DB build-result write (review finding — )
owner-lease cache GET in _db_update_build_result can drop the DB build-result write (review finding — )
auto-reply regex skips customer/compliance mail before compliance exemption and account guard (review finding — )
auto-reply regex skips customer/compliance mail before compliance exemption and account guard (review finding — )
site error-route queue gate is tier-agnostic and skips T1-T3 escalation (review finding - )
site error-route queue gate is tier-agnostic and skips T1-T3 escalation (review finding - )
db budget exhausted counter only visible for API; first rejection missed by rate (review finding — )
db budget exhausted counter only visible for API; first rejection missed by rate (review finding — )
share Cloudflare managed-marker set across curl/browser challenge checks (review finding — )
share Cloudflare managed-marker set across curl/browser challenge checks (review finding — )
TLS-cert and dead-origin terminal errors recorded as proxy infrastructure failures (review finding BUGA-1 - )
TLS-cert and dead-origin terminal errors recorded as proxy infrastructure failures (review finding BUGA-1 - )
quick-deposit PaymentIntent has no idempotency key; connection errors reported as definitive failure (review finding BILL-1 - )
quick-deposit PaymentIntent has no idempotency key; connection errors reported as definitive failure (review finding BILL-1 - )
mid-request re-admission failure can half-apply mutations (review finding — )
mid-request re-admission failure can half-apply mutations (review finding — )
add-on persist-failure refund and recharge use bare user_id instead of the spend principal for keyless jobs (review finding — )
add-on persist-failure refund and recharge use bare user_id instead of the spend principal for keyless jobs (review finding — )
budget errors swallowed by broad except in handlers (review finding — )
budget errors swallowed by broad except in handlers (review finding — )
unbounded release_browser can block T4 deadline salvage (review finding — )
unbounded release_browser can block T4 deadline salvage (review finding — )
hung SHOW POOLS leaks executor threads (wait_for does not stop the thread) (review finding — )
hung SHOW POOLS leaks executor threads (wait_for does not stop the thread) (review finding — )
anchor bare chl_page managed-challenge marker (review finding — )
anchor bare chl_page managed-challenge marker (review finding — )
rejected T4 salvage discards classified challenge evidence (review finding — )
rejected T4 salvage discards classified challenge evidence (review finding — )
SDK-passive exemption skips bot protection system block-phrase guards (review finding - )
SDK-passive exemption skips bot protection system block-phrase guards (review finding - )
worker duplicates the Site error route reason literal instead of importing it (review finding — )
worker duplicates the Site error route reason literal instead of importing it (review finding — )
paid-success SLO counts unsettled in-flight jobs as successes (review finding — )
paid-success SLO counts unsettled in-flight jobs as successes (review finding — )
duplicate SoftwareApplication JSON-LD on /pricing from root layout (review finding — )
duplicate SoftwareApplication JSON-LD on /pricing from root layout (review finding — )
Fix(api): /health cache check never fails — sync ping on async client (, )
Fix(api): /health cache check never fails — sync ping on async client (, )
same-day closed internal tooling not suppressed by future-skew guard (review finding — )
same-day closed internal tooling not suppressed by future-skew guard (review finding — )
degraded concurrency fallback is per-process and not a hard cap (review finding — )
degraded concurrency fallback is per-process and not a hard cap (review finding — )
hotfix lane hard-gated on single-shot production preflight with no bypass (review finding — )
hotfix lane hard-gated on single-shot production preflight with no bypass (review finding — )
preflight read-only contract is enforced by a weak regex denylist (review finding — )
preflight read-only contract is enforced by a weak regex denylist (review finding — )
follow-up: (deferred from )
follow-up: (deferred from )
internal tooling writers bypass lifecycle lock and reset memos to 0600 (review findings — )
internal tooling writers bypass lifecycle lock and reset memos to 0600 (review findings — )
org-scoped usage chart/breakdown drop legacy NULL-org rows (review finding — )
org-scoped usage chart/breakdown drop legacy NULL-org rows (review finding — )
hotfix production-preflight job lacks protected-ref guard while holding prod SSH keys (review finding — )
hotfix production-preflight job lacks protected-ref guard while holding prod SSH keys (review finding — )
follow-up: 1 deferred item(s) (deferred from )
follow-up: 1 deferred item(s) (deferred from )
bound cache latency in entitlement cache and post-commit invalidation (review finding — )
bound cache latency in entitlement cache and post-commit invalidation (review finding — )
drop phantom args/kwargs from analytics funnel docs (deploy )
drop phantom args/kwargs from analytics funnel docs (deploy )
follow-up: 3 deferred item(s) (deferred from )
follow-up: 3 deferred item(s) (deferred from )
ship internal tooling-external.sh in trusted logical runtime (review finding — )
ship internal tooling-external.sh in trusted logical runtime (review finding — )
Fix(shared): ungated SQL and cancelled admission bypass DB budget accounting (, )
Fix(shared): ungated SQL and cancelled admission bypass DB budget accounting (, )
sequential T3 retry loop ignores dead-origin and deterministic TLS causes between attempts
sequential T3 retry loop ignores dead-origin and deterministic TLS causes between attempts
status-0 non-reputation T3 failures are given a fabricated 403 and labelled anti_bot_blocked
status-0 non-reputation T3 failures are given a fabricated 403 and labelled anti_bot_blocked
b2b concurrency fail-open catches only RateLimiterUnavailableError while deps catches Exception (review finding — )
b2b concurrency fail-open catches only RateLimiterUnavailableError while deps catches Exception (review finding — )
broaden evidence redaction or scope cross-producer reads on incident ingest (review finding — )
broaden evidence redaction or scope cross-producer reads on incident ingest (review finding — )
scheduled scrape queue payload omits billing_user_id so credit refund and spend reversal can target different accounts (review finding — )
scheduled scrape queue payload omits billing_user_id so credit refund and spend reversal can target different accounts (review finding — )
add retention/purge path and volume cap for append-only incident_events (review finding — )
add retention/purge path and volume cap for append-only incident_events (review finding — )
API stuck-job reaper gates spend reversal on api_key_id so keyless scheduled jobs keep phantom reserved spend (review finding — )
API stuck-job reaper gates spend reversal on api_key_id so keyless scheduled jobs keep phantom reserved spend (review finding — )
deploy-cloud provider.sh does not assert the heartbeat-watchdog OK marker (review finding — )
deploy-cloud provider.sh does not assert the heartbeat-watchdog OK marker (review finding — )
sync SDK manifest to openapi v3.25.1 (deploy )
sync SDK manifest to openapi v3.25.1 (deploy )
tier-intelligence failure counters treat DNS/TLS/cert/tunnel failures as tier failures
tier-intelligence failure counters treat DNS/TLS/cert/tunnel failures as tier failures
enterprise-org non-owner members lose enterprise RPM/concurrency/tenant override under owner-only snapshot rule (review finding — )
enterprise-org non-owner members lose enterprise RPM/concurrency/tenant override under owner-only snapshot rule (review finding — )
paid Groq fallback (llama-4-scout) still drains shared OpenRouter key — recurrence of ; FREE_ONLY defaults false
paid Groq fallback (llama-4-scout) still drains shared OpenRouter key — recurrence of ; FREE_ONLY defaults false
T4 session lands on Imperva SPA /error route on deep pages (no network capture, challenge evidence lost across deferred T4)
T4 session lands on Imperva SPA /error route on deep pages (no network capture, challenge evidence lost across deferred T4)
follow-up: (deferred from )
follow-up: (deferred from )
unblock deploy (hotfix health contract wiring, 0445 migrations)
unblock deploy (hotfix health contract wiring, 0445 migrations)
reports and crawl routers read raw CF-Connecting-IP, bypassing get_client_ip rate-limit keying
reports and crawl routers read raw CF-Connecting-IP, bypassing get_client_ip rate-limit keying
Next.js middleware forwards client-supplied CF-Connecting-IP as trusted X-Forwarded-For
Next.js middleware forwards client-supplied CF-Connecting-IP as trusted X-Forwarded-For
make internal service last-failure metric a scalar subquery
make internal service last-failure metric a scalar subquery
keep connection pool server_idle_timeout below database idle_session_timeout
keep connection pool server_idle_timeout below database idle_session_timeout
crawl depth-wave enqueue failure refunds the full wave after partial create_job enqueue (pre-existing, noticed in )
crawl depth-wave enqueue failure refunds the full wave after partial create_job enqueue (pre-existing, noticed in )
deploy SLI finalizes ok from a partial unsettled post window (review finding - )
deploy SLI finalizes ok from a partial unsettled post window (review finding - )
avoid phantom jobs on opt-in result-cache hits (deferred from )
avoid phantom jobs on opt-in result-cache hits (deferred from )
Staging Review: backup data policy v4 is forward-only — post-deploy backups not strictly restorable by rolled-back restore tooling (staging → main)
Staging Review: backup data policy v4 is forward-only — post-deploy backups not strictly restorable by rolled-back restore tooling (staging → main)
Check 2.5 matches .Status==exited, never true in real container (review finding — )
Check 2.5 matches .Status==exited, never true in real container (review finding — )
follow-up: (deferred from )
follow-up: (deferred from )
follow-up: (deferred from )
follow-up: (deferred from )
consolidate duplicate proxy network comparison blog posts
consolidate duplicate proxy network comparison blog posts
accept contrecord database segments in archive header check
accept contrecord database segments in archive header check
hotfix-deploy health probe curls http://localhost/health, which load balancer always 404s
hotfix-deploy health probe curls http://localhost/health, which load balancer always 404s
RetentionSweepZeroRowsCreditBalanceMutations fires permanently because no row can be older than the 400-day window
RetentionSweepZeroRowsCreditBalanceMutations fires permanently because no row can be older than the 400-day window
T3 cookie-jar cookies bypass header order on HTTP/2: libcurl emits them first, before sec-ch-ua
T3 cookie-jar cookies bypass header order on HTTP/2: libcurl emits them first, before sec-ch-ua
unblock deploy CI (root-trust bundle closure, 0444 migrations)
unblock deploy CI (root-trust bundle closure, 0444 migrations)
fence structure LIST ack and claim release on cancellation
fence structure LIST ack and claim release on cancellation
follow-up: Firefox bundle currency (deferred from )
follow-up: Firefox bundle currency (deferred from )
follow-up: ZohoMailApiClient.list_messages unread window starvation past newest 200 messages (deferred from )
follow-up: ZohoMailApiClient.list_messages unread window starvation past newest 200 messages (deferred from )
T4 Firefox route claims Windows but the Linux engine lacks Windows fonts (and other OS side channels)
T4 Firefox route claims Windows but the Linux engine lacks Windows fonts (and other OS side channels)
shadow dry-run strict restore fails nondeterministically on the same backup, and its diagnostics are fully suppressed
shadow dry-run strict restore fails nondeterministically on the same backup, and its diagnostics are fully suppressed
egress AST guard skips tests/scripts dirs at any depth (review finding - )
egress AST guard skips tests/scripts dirs at any depth (review finding - )
discover_site byte caps turn large sitemap/robots into not-found (review finding - )
discover_site byte caps turn large sitemap/robots into not-found (review finding - )
T4 runs without a proxy for ~20% of T4 jobs with half the success rate
T4 runs without a proxy for ~20% of T4 jobs with half the success rate