chore(triage): digest — mkit

[christopherwxyz]

Triage digest — mkit — July 31, 2026 (UTC)

Needs a milestone call

• None — feat(keystore): Cloud KMS backend (BackendKind::Cloud, AWS KMS first) #204 (Cloud KMS backend) and fix(keystore): YubiKey backend fails closed for any PIN- or touch-protected key (no PinProvider wired in) #777 (YubiKey PIN/touch fail-closed) already correctly carry post-release improvements; the milestone description explicitly names feat(keystore): Cloud KMS backend (BackendKind::Cloud, AWS KMS first) #204, and fix(keystore): YubiKey backend fails closed for any PIN- or touch-protected key (no PinProvider wired in) #777 fits the same crypto/keystore-roadmap theme. docs(drift): report — mkit #787 (docs-drift auto-report) and chore(triage): digest — mkit #631 (this digest) are recurring automated bookkeeping issues, not release-scoped work, so they remain intentionally unmilestoned.
• Informational only, not a call to make: open PRs deps(mcp): bump body-parser from 2.2.2 to 2.3.0 in /apps/mcp #899, deps(mcp): bump hono from 4.12.25 to 4.12.32 in /apps/mcp #901, deps(mcp): bump fast-uri from 3.1.2 to 3.1.4 in /apps/mcp #902, ci(actions): bump the actions-minor group across 1 directory with 4 updates #903, deps(rust): bump the cargo-minor group across 1 directory with 11 updates #904 (mcp/rust dependabot bumps, all created 2026-07-24 or later) still don't carry a milestone, while the other 9 open dependabot/CI PRs (created 2026-07-20/21, ci(actions): bump actions/setup-node from 6.4.0 to 7.0.0 #888-deps(rust): bump k256 from 0.13.4 to 0.14.0 in /rust #897) carry mkit public release (v0.4.0). No available tool exposes a milestone-write parameter for pull requests in this environment, so this can't be actioned here regardless of the call — flagging the inconsistency again for a human/process check.

Possible duplicates

• None. The 3 substantive open issues (docs(drift): report — mkit #787, fix(keystore): YubiKey backend fails closed for any PIN- or touch-protected key (no PinProvider wired in) #777, feat(keystore): Cloud KMS backend (BackendKind::Cloud, AWS KMS first) #204) are distinct topics with no title/body overlap. All 14 open PRs are dependabot/CI bumps for distinct packages or update groups — no overlap.

Stale (30+ days idle)

• None. docs(drift): report — mkit #787 last active 2026-07-27 (4 days ago), feat(keystore): Cloud KMS backend (BackendKind::Cloud, AWS KMS first) #204 last active 2026-07-13 (18 days ago), fix(keystore): YubiKey backend fails closed for any PIN- or touch-protected key (no PinProvider wired in) #777 last active 2026-07-12 (19 days ago). Open PRs range from 2026-07-28 (ci(actions): bump the actions-minor group across 1 directory with 4 updates #903/deps(rust): bump the cargo-minor group across 1 directory with 11 updates #904) to 2026-07-20 (11 days ago). Nothing has crossed the 30-day threshold.

Decorated this run

• No changes this run. Primary 48h decoration window (since ~2026-07-29) contained zero issues or PRs other than this digest issue itself (last touched 2026-07-30 by the prior triage run) — nothing to decorate. Full open backlog (4 open issues including this digest, 14 open PRs) was re-checked read-only; all items already carry correct, non-conflicting labels and milestones from prior passes.

Skipped this run (tooling gaps)

• GitHub Project -Djemalloc build path is not exercised by CI or local testing #13 placement: no Projects v2 tool available in this environment (list_issue_fields only exposes org-level issue fields — Priority/Start date/Target date/Effort — not the Project board's Status/Size/Estimate/Iteration fields).
• Pull request milestone assignment: update_pull_request has no milestone parameter in this environment; PRs deps(mcp): bump body-parser from 2.2.2 to 2.3.0 in /apps/mcp #899/deps(mcp): bump hono from 4.12.25 to 4.12.32 in /apps/mcp #901/deps(mcp): bump fast-uri from 3.1.2 to 3.1.4 in /apps/mcp #902/ci(actions): bump the actions-minor group across 1 directory with 4 updates #903/deps(rust): bump the cargo-minor group across 1 directory with 11 updates #904 remain unmilestoned despite matching the ci(actions): bump actions/setup-node from 6.4.0 to 7.0.0 #888-deps(rust): bump k256 from 0.13.4 to 0.14.0 in /rust #897 precedent.
• Issue pinning: no pin tool available; digest issue left unpinned (cannot verify current pin state either).
• Label creation: no create/list-label tool available. Not currently needed — stale (795548, "No activity in 30+ days") and duplicate already exist in the repo, confirmed via get_label.