Issues

• bug: bind accepted GitHub Action pins to release-source evidence

  bugready-for-agentreview-fallout
  Anionix/agent-work-governor#121 · Filter by author Anionix opened on Jul 30, 2026

• [Formal] Pilot Aeneas-to-Lean refinement for one pure decision function

  blockedenhancement
  Anionix/agent-work-governor#108 · Filter by author Anionix opened on Jul 30, 2026
  1

• [Bug] Reconcile merged-PR review fallout automatically

  bugready-for-agentreview-fallout
  Anionix/agent-work-governor#99 · Filter by author Anionix opened on Jul 30, 2026
  1

• [Security] Make a GitHub App the sole authoritative merge check

  bugready-for-agentsecurity
  Anionix/agent-work-governor#98 · Filter by author Anionix opened on Jul 30, 2026
  3

• [Bug] Replace the false Bubblewrap setsid contract with tested session evidence

  bugreview-falloutsecurity
  Anionix/agent-work-governor#94 · Filter by author Anionix opened on Jul 30, 2026
  1

• [Bug] Bind shadow PYTHONPATH to the selected Nix closure

  bugreview-falloutsecurity
  Anionix/agent-work-governor#93 · Filter by author Anionix opened on Jul 30, 2026
  1

• [Bug] Gate root harness tests on a candidate-accessible Python

  bugreview-fallout
  Anionix/agent-work-governor#91 · Filter by author Anionix opened on Jul 30, 2026
  1

• [Bug] Reject receipt-path symlinks before filesystem mutation

  bugreview-falloutsecurity
  Anionix/agent-work-governor#90 · Filter by author Anionix opened on Jul 30, 2026
  1

• [Bug] Scope harness artifacts to one invocation

  bugreview-falloutsecurity
  Anionix/agent-work-governor#89 · Filter by author Anionix opened on Jul 30, 2026
  1

• [Bug] Prove candidate IPv6 denial without host-routable IPv6

  bugready-for-agentsecurity
  Anionix/agent-work-governor#80 · Filter by author Anionix opened on Jul 30, 2026 · v0.2 Runtime MVP
  6

• [Bug] Replace bespoke PyYAML repackaging with a standard locked wheel runtime

  bugready-for-agentsecurity
  Anionix/agent-work-governor#79 · Filter by author Anionix opened on Jul 30, 2026
  1

• [Bug] Add granular attestation for trusted Rust shadow inputs

  bugsecurity
  Anionix/agent-work-governor#69 · Filter by author Anionix opened on Jul 29, 2026 · v0.2 Runtime MVP
  1

• [Bug] Deny outbound network for candidate harness checks across Linux and macOS

  bugsecuritytracking
  Anionix/agent-work-governor#68 · Filter by author Anionix opened on Jul 29, 2026 · v0.2 Runtime MVP
  2

• [Bug] Make offline cargo-deny yanked checks authoritative

  bug
  Anionix/agent-work-governor#67 · Filter by author Anionix opened on Jul 29, 2026 · v0.2 Runtime MVP
  1

• [Bug] Replace live pip-audit queries with pinned offline vulnerability evidence

  bug
  Anionix/agent-work-governor#66 · Filter by author Anionix opened on Jul 29, 2026 · v0.2 Runtime MVP
  1

• [Bug] Classify trusted harness faults as shadow inconclusive

  bugreview-fallout
  Anionix/agent-work-governor#65 · Filter by author Anionix opened on Jul 29, 2026 · v0.2 Runtime MVP
  1

• [Toolchain] Add locked nil analyzer for Nix

  enhancement
  Anionix/agent-work-governor#55 · Filter by author Anionix opened on Jul 29, 2026 · v0.2 Runtime MVP
  1

• [Enhancement] Return structured owner-policy bootstrap guidance from doctor

  documentationenhancement
  Anionix/agent-work-governor#49 · Filter by author Anionix opened on Jul 29, 2026 · v0.2 Runtime MVP
  1

• [Tracking] Add Lean abstract reference model

  blockedtracking
  Anionix/agent-work-governor#12 · Filter by author Anionix opened on Jul 28, 2026 · v0.4 Lean Reference Model
  1

• [Tracking] Add Kani implementation assurance

  tracking
  Anionix/agent-work-governor#11 · Filter by author Anionix opened on Jul 28, 2026 · v0.3 Kani Assurance
  3