Issues

• security: console user principal provisioner skips administrator sandbox defaults

  paradigmxyz/centaur#2074 · Filter by author Wenjix opened on Oct 28, 2026

• security: iron-control fragment methods field dropped, thread foreign-id collisions, unvalidated queue-name identifiers

  paradigmxyz/centaur#2073 · Filter by author Wenjix opened on Oct 28, 2026

• security: slack sync keeps stale privacy/deletion state for rows leaving discovery

  paradigmxyz/centaur#2072 · Filter by author Wenjix opened on Oct 28, 2026

• security: credentialed tool clients can send API keys to caller-chosen origins

  paradigmxyz/centaur#2071 · Filter by author Wenjix opened on Oct 28, 2026

• security: workflow run creation lets any caller assert a run principal

  paradigmxyz/centaur#2069 · Filter by author Wenjix opened on Oct 28, 2026

• api-rs fails a turn instead of replaying it when the control plane restarts before the sandbox is assigned

  paradigmxyz/centaur#2063 · Filter by author tobernguyen opened on Oct 27, 2026

• access_token mode: a broker token rotation mid-turn 401s Claude Code, which blanks ~/.claude/.credentials.json and breaks the sandbox for every later turn

  paradigmxyz/centaur#2042 · Filter by author tinkererlife opened on Oct 23, 2026

• Session titles can't be turned off or routed separately while OPENAI_API_KEY is set

  paradigmxyz/centaur#2035 · Filter by author mleungdev opened on Oct 22, 2026

• Console roles API can't set assign_by_default

  paradigmxyz/centaur#2034 · Filter by author mleungdev opened on Oct 22, 2026

• Warm-claimed sandboxes run without a thread key; pass it from harness-server?

  paradigmxyz/centaur#2033 · Filter by author mleungdev opened on Oct 22, 2026

• slackbotv2: let deployments replace the error text posted when a turn can't start

  paradigmxyz/centaur#1958 · Filter by author tobernguyen opened on Oct 14, 2026

• api-rs: reload the persona registry when overlay sources change

  paradigmxyz/centaur#1907 · Filter by author tobernguyen opened on Oct 7, 2026

• Pi harness: support custom / OpenAI-compatible providers (models.json + provider env knobs)

  paradigmxyz/centaur#1868 · Filter by author zaycruz opened on Oct 4, 2026

• Sandbox agent-browser fails every HTTPS navigation: iron-proxy CA is not trusted by Chrome (NSS)

  paradigmxyz/centaur#1802 · Filter by author jwasserman-sentora opened on Sep 29, 2026

• Console chat removal in October: any chance of keeping it behind a flag?

  paradigmxyz/centaur#1695 · Filter by author berkaykiran opened on Sep 18, 2026

• slack tool: SLACK_SEARCH_TOKEN secret declaration never injects on search calls

  paradigmxyz/centaur#1579 · Filter by author tobernguyen opened on Aug 31, 2026

• Retain per-message provenance in Slack index aggregates, including short threads

  paradigmxyz/centaur#1578 · Filter by author lucacseth opened on Aug 31, 2026

• RWX repo-cache needs writer serialization and conservative stale-lock recovery

  paradigmxyz/centaur#1576 · Filter by author lucacseth opened on Aug 31, 2026

• Workflow interval changes preserve the old pending schedule tick

  paradigmxyz/centaur#1575 · Filter by author lucacseth opened on Aug 31, 2026

• Sandbox admission is blind to node memory; OOM kills lose in-flight turns

  paradigmxyz/centaur#1563 · Filter by author 0xAlcibiades opened on Aug 30, 2026

• Tool/skill auto-reload does not recompose the sandbox prompt

  paradigmxyz/centaur#1562 · Filter by author lucacseth opened on Aug 30, 2026

• OAuth private-channel sync does not honor configured Slack exclusion patterns

  paradigmxyz/centaur#1561 · Filter by author lucacseth opened on Aug 30, 2026

• linearbot keeps working an issue after it is un-delegated

  paradigmxyz/centaur#1559 · Filter by author 0xAlcibiades opened on Aug 30, 2026

• sandbox_entitlements_hosts is hardcoded to CENTAUR_CONSOLE_URL, so no reachable Console host can be entitled

  paradigmxyz/centaur#1558 · Filter by author 0xAlcibiades opened on Aug 30, 2026

• Pod-less Sandbox CRs permanently consume running-capacity slots

  paradigmxyz/centaur#1554 · Filter by author 0xAlcibiades opened on Aug 30, 2026
  2