Issues

• Learning persistence ENOSPC is logged without a durable failure result or same-owner reconciliation status

  ruvnet/ruflo#4880 · Filter by author sparkling opened on Nov 7, 2026

• Unified memory search exceeds default HTTP deadline; namespace errors and elapsed time are obscured

  ruvnet/ruflo#4876 · Filter by author sparkling opened on Nov 7, 2026
  1

• aidefence_learn treats PII false-positive feedback as a missed prompt injection; no supported exact retraction

  ruvnet/ruflo#4862 · Filter by author sparkling opened on Nov 6, 2026
  1

• Federation guard cannot disable PII-only refusals while preserving secret screening

  ruvnet/ruflo#4861 · Filter by author sparkling opened on Nov 6, 2026
  2

• AutoMemory native read cannot inspect preserved duplicate namespace/key records by identity

  ruvnet/ruflo#4852 · Filter by author sparkling opened on Nov 6, 2026

• AutoMemory: prepare external memory package binding automatically for fresh worktrees before import

  ruvnet/ruflo#4851 · Filter by author sparkling opened on Nov 6, 2026
  1

• providers test -p openai ignores the saved endpoint; agent_execute has no openai-compatible branch

  ruvnet/ruflo#4834 · Filter by author ruvnet opened on Nov 5, 2026

• cleanup --force deletes any data/ and memory/ folders and the user's own hooks

  ruvnet/ruflo#4833 · Filter by author ruvnet opened on Nov 5, 2026

• hive-mind spawn --claude skips Claude Code permission prompts by default

  ruvnet/ruflo#4832 · Filter by author ruvnet opened on Nov 5, 2026

• cli-core: move the reserved-name check into validateIdentifier on the next cli-core release

  security-hardening
  ruvnet/ruflo#4811 · Filter by author ruvnet opened on Nov 5, 2026

• Contributor tracker: 59 scoped issues from the 2026-11-04 deep review

  good first issuehelp wanted
  ruvnet/ruflo#4775 · Filter by author ruvnet opened on Nov 5, 2026
  3

• refactor: split commands/doctor.ts (3055 lines) into doctor-checks/

  help wanted
  ruvnet/ruflo#4773 · Filter by author ruvnet opened on Nov 5, 2026
  1

• refactor: split the router* commands out of commands/neural.ts (4704 lines)

  help wanted
  ruvnet/ruflo#4772 · Filter by author ruvnet opened on Nov 5, 2026
  1

• security(ruvocal): Mongo binds all interfaces without auth; the federation handshake signs a raw nonce; the console auto-installs patch updates

  help wantedsecurity-hardening
  ruvnet/ruflo#4755 · Filter by author ruvnet opened on Nov 5, 2026
  1

• security: transport and WebSocket limits (x-gateway ws-proxy counter, MCP http /ws maxPayload, SSE cap, BBS sync redirects)

  help wantedsecurity-hardening
  ruvnet/ruflo#4752 · Filter by author ruvnet opened on Nov 5, 2026

• security(managed-agents): tools act on any session in the Anthropic org, not just ones created here

  help wantedsecurity-hardening
  ruvnet/ruflo#4751 · Filter by author ruvnet opened on Nov 5, 2026
  1

• security(transfer): pattern-store downloads have no real signature, no name sanitizing, and no size or timeout limits

  help wantedsecurity-hardening
  ruvnet/ruflo#4750 · Filter by author ruvnet opened on Nov 5, 2026
  1

• security(federation): inbound envelopes have no replay, freshness or recipient check

  help wantedsecurity-hardening
  ruvnet/ruflo#4749 · Filter by author ruvnet opened on Nov 5, 2026
  1

• security(federation): legacy-v1 signatures cover only id and type; default to require-jcs

  help wantedsecurity-hardening
  ruvnet/ruflo#4748 · Filter by author ruvnet opened on Nov 5, 2026
  1

• security: learned-lessons.json from a cloned repo is presented as this project's own build and test history

  help wantedsecurity-hardening
  ruvnet/ruflo#4747 · Filter by author ruvnet opened on Nov 5, 2026
  1

• security: companion helpers are unsigned and written through symlinks; .claude-flow writes follow symlinks

  help wantedsecurity-hardening
  ruvnet/ruflo#4746 · Filter by author ruvnet opened on Nov 5, 2026

• security: helper refresh skips the integrity check when .helpers-version is ahead or .LOCKED exists, and accepts older signed manifests

  help wantedsecurity-hardening
  ruvnet/ruflo#4744 · Filter by author ruvnet opened on Nov 5, 2026
  1

• security: the pre-bash gate does not parse $(...) or ${X:-/}

  help wantedsecurity-hardening
  ruvnet/ruflo#4742 · Filter by author ruvnet opened on Nov 5, 2026
  1

• chore(daemon): the daemon opens ruvector.db in the project root

  help wanted
  ruvnet/ruflo#4741 · Filter by author ruvnet opened on Nov 5, 2026
  1

• fix(memory): write hnsw.metadata.json atomically and surface failures

  data-integritygood first issuehelp wanted
  ruvnet/ruflo#4739 · Filter by author ruvnet opened on Nov 5, 2026
  1