List view

• Production hardening & operability

  Pre-beta production-readiness: request body-size limits, audit/feed retention, metrics endpoint, OIDC live-tenant verification + claim hardening.

  No due date

  •7/7 issues closed
  100% complete0 open7 closed

• Release, packaging & publishing

  Tag→signed GHCR image with SBOM/SLSA/cosign, container image vuln scan, CHANGELOG/RELEASING, published docs site. Parity with IcebergTTX/EBS.

  No due date

  •5/7 issues closed
  71% complete2 open5 closed

• CI: static analysis & code scanning

  Strengthen CI to sibling (IcebergTTX/EBS) parity: CodeQL, workflow SAST (zizmor+actionlint), static type checking, Dependabot uv ecosystem.

  No due date

  •4/4 issues closed
  100% complete0 open4 closed

• Go-public: repo settings & governance

  GitHub admin toggles and org hygiene to complete before/at making the repo public: secret scanning + branch protection, private vuln reporting, Discussions decision, CODEOWNERS team.

  No due date

  •4/4 issues closed
  100% complete0 open4 closed