Issues

• core: finish the public-path freeze — ten pub mod + barrel sites, and two unreferenced capsule-i18n functions

  Capsulsaurus/Capsule#480 · Filter by author justin13888 opened on Sep 10, 2026

• server: no operation can carry a body cap tighter than the router-wide backstop — Kynos refuses a second BodySize on a route

  Capsulsaurus/Capsule#478 · Filter by author justin13888 opened on Sep 10, 2026

• perf(server): lock each counter partition separately (S-C32)

  Capsulsaurus/Capsule#477 · Filter by author justin13888 opened on Sep 9, 2026

• server: federation's receiving half — the egress pull worker, re-validation, weighted per-peer budgets, and the operator peer commands

  Capsulsaurus/Capsule#476 · Filter by author justin13888 opened on Sep 9, 2026

• core: sign_lifecycle inherits created_by_device from the chain head while signing with the current device, so any continuation by another device fails verify_asset

  Capsulsaurus/Capsule#475 · Filter by author justin13888 opened on Sep 9, 2026
  2

• build: lint-check-rust omits --all-targets, so clippy has never run over any test target

  Capsulsaurus/Capsule#474 · Filter by author justin13888 opened on Sep 9, 2026

• server: removing a member from an album's roster reclaims nothing — their uploaded bytes stay charged to an account that can no longer reach them

  Capsulsaurus/Capsule#473 · Filter by author justin13888 opened on Sep 9, 2026

• server: the upload policy's closed content-type set omits image/jxl, refusing every thumbnail the media stack now encodes

  Capsulsaurus/Capsule#470 · Filter by author justin13888 opened on Sep 5, 2026

• core: no seam for the enrollment client ceremony — a Workspace cannot cross-sign a second device and there is no safety-code function

  Capsulsaurus/Capsule#471 · Filter by author justin13888 opened on Sep 5, 2026

• core: DropAdopter::adopt returns the manifest but registers no asset and discards the sealed metadata blob

  Capsulsaurus/Capsule#469 · Filter by author justin13888 opened on Sep 5, 2026

• core: the backup artifact carries no album authority, so a restored asset reads but does not verify

  Capsulsaurus/Capsule#468 · Filter by author justin13888 opened on Sep 5, 2026

• core: a Workspace cannot open as a server account — no constructor from a recovered master key, no way to bind the account id

  Capsulsaurus/Capsule#467 · Filter by author justin13888 opened on Sep 5, 2026

• sdk: DirectoryClient::publish omits X-Capsule-Identity-Key, so every publish is a 400 against the real server

  Capsulsaurus/Capsule#466 · Filter by author justin13888 opened on Sep 5, 2026

• core: sync_apply decodes feed manifest bytes as AssetManifest, but the feed serves provenance-record bytes

  Capsulsaurus/Capsule#465 · Filter by author justin13888 opened on Sep 5, 2026

• sdk: the push ladder never uploads the provenance blob, so SDK/CLI pushes never reach the feed

  Capsulsaurus/Capsule#464 · Filter by author justin13888 opened on Sep 5, 2026

• server: blob fetch is decided from the first live reference, so bytes shared across owners can answer a member 404 or a wrong 403

  Capsulsaurus/Capsule#462 · Filter by author justin13888 opened on Sep 5, 2026

• auth: CLI OIDC login — loopback listener and device authorization grant (S-N2 remainder)

  Capsulsaurus/Capsule#461 · Filter by author justin13888 opened on Sep 5, 2026
  1

• server: Valkey adapter for OidcAuthorizationStore and Postgres adapter for FederatedAccounts

  Capsulsaurus/Capsule#460 · Filter by author justin13888 opened on Sep 5, 2026
  1

• core: retire the unsigned-sidecar migration and its private decoder once no unsigned library remains

  Capsulsaurus/Capsule#457 · Filter by author justin13888 opened on Sep 2, 2026

• cli: capsule library migrate drives Workspace::migrate_unsigned_sidecars

  Capsulsaurus/Capsule#456 · Filter by author justin13888 opened on Sep 2, 2026

• S-B11: run the Google Takeout import against a real archive (the done* remainder)

  Capsulsaurus/Capsule#452 · Filter by author justin13888 opened on Sep 2, 2026

• server/sdk: widen the protocol gate to every non-exempt operation

  Capsulsaurus/Capsule#451 · Filter by author justin13888 opened on Sep 2, 2026
  1

• server: run the closed derivative-format check on receipt — capsule_server::upload::envelope::check_envelope

  enhancement
  Capsulsaurus/Capsule#449 · Filter by author justin13888 opened on Sep 2, 2026

• media: decrypt fetched derivative blobs — capsule_sdk::fetch::open_representation returns ciphertext with no key path

  enhancement
  Capsulsaurus/Capsule#448 · Filter by author justin13888 opened on Sep 2, 2026

• server: Postgres adapters for the remaining durable ports

  enhancement
  Capsulsaurus/Capsule#446 · Filter by author justin13888 opened on Sep 2, 2026