Q4/26

Issues

• Dead inputSum accumulation in ValidateTransferActionTokenTypes: value-conservation check documented but not performed

  auditorcleanup
  Task

  LFDT-Panurus/panurus#2426 · Filter by author Effi-S opened on Sep 29, 2026 · Q4/26
  

• Dead inputSum accumulation in ValidateTransferActionTokenTypes: value-conservation check documented but not performed

  auditorcleanup
  Unread
  LFDT-Panurus/panurus#2427·Effi-S opened Sep 29, 2026 · Updated Oct 28, 2026
  28

  

• identity: areMe converts storage errors into false-negative ownership answers

  bugdbhardeningidentityservices
  LFDT-Panurus/panurus#2319 · Filter by author Effi-S opened on Aug 26, 2026 · Q4/26
  

• db/kvs: hashicorp Vault backend ignores context and swallows errors into false-negative existence checks

  bugdbhardeningidentitystorage
  Bug

  LFDT-Panurus/panurus#2037 · Filter by author adecaro opened on Jul 30, 2026 · Q4/26
  

• CI: share the Go build cache across jobs to avoid cold recompilation

  cienhancement
  Task

  LFDT-Panurus/panurus#2343 · Filter by author Effi-S opened on Aug 31, 2026 · Q4/26
  

• Observability, Alerting, and Automated Throttle Escalation [LOW]

  security
  Task

  LFDT-Panurus/panurus#1643 · Filter by author HayimShaul opened on May 3, 2026 · Q4/26
  1

  

• Bound All Work Triggered by a Single Token Selection Request [HIGH]

  security
  Task

  LFDT-Panurus/panurus#1641 · Filter by author HayimShaul opened on May 3, 2026 · Q4/26
  1

  

• request approval: check if the request was already approved

  hardeningnetwork-driver
  Unread
  LFDT-Panurus/panurus#2430·Effi-S opened Sep 29, 2026 · Updated Oct 28, 2026
  12

  

• Re-enable commented-out integration test matrix entries in tests.yml

  cifabricxtesting
  Task

  LFDT-Panurus/panurus#1945 · Filter by author adecaro opened on Jul 17, 2026 · Q4/26
  2

  

• tokens service: rework PruneInvalidUnspentTokens

  enhancement
  Task

  LFDT-Panurus/panurus#988 · Filter by author adecaro opened on Mar 18, 2025 · Q4/26
  4

• Bound remaining unlimited storage reads and inputs (materialized queries, IN-clause expansion, opaque keystore writes) [MED]

  security
  Feature

  LFDT-Panurus/panurus#1984 · Filter by author AkramBitar opened on Jul 23, 2026 · Q4/26

• ttx: require explicit wallet selection in business operations

  documentationenhancement
  LFDT-Panurus/panurus#2014 · Filter by author hstarorg opened on Jul 29, 2026 · Q4/26

• Token selection is amount-blind, and lock acquisition is serial and pinned to the vault database

  enhancementperformancestoragetoken-selector
  Feature

  LFDT-Panurus/panurus#2017 · Filter by author adecaro opened on Jul 30, 2026 · Q4/26

• Transaction records cannot represent an action spending tokens of multiple enrollment IDs

  bugservicestoken-driver
  LFDT-Panurus/panurus#2242 · Filter by author EvanYan1024 opened on Aug 17, 2026 · Q4/26
  1

• TMSProvider holds its provider-wide write lock across public parameters resolution, so one hung ledger fetch blocks every TMS on the node

  goperformancestability
  Bug

  LFDT-Panurus/panurus#2306 · Filter by author AkramBitar opened on Aug 25, 2026 · Q4/26

• Index HasTokenForIdentity without a btree over owner_identity (BYTEA too large for Postgres)

  enhancementperformance
  LFDT-Panurus/panurus#1911 · Filter by author AkramBitar opened on Jul 14, 2026 · Q4/26

• identity: hot-path allocation and redundant-work bundle across signer/verifier resolution

  benchmarkcleanupidentityperformanceservices
  Task

  LFDT-Panurus/panurus#2075 · Filter by author adecaro opened on Jul 30, 2026 · Q4/26

• Support an optional versioned policy reference on token outputs

  enhancement
  LFDT-Panurus/panurus#2104 · Filter by author hstarorg opened on Aug 3, 2026 · Q4/26
  4

• tokens: misc low-severity findings (unique-key guard that still notifies, nil-deref constructor, unchecked type assertion)

  bugcleanuphardeningservices
  Bug

  LFDT-Panurus/panurus#2187 · Filter by author adecaro opened on Aug 11, 2026 · Q4/26
  2

  

• Ledger drift checks: walkTransactions' offset pagination is unstable under concurrent writes

  LFDT-Panurus/panurus#2431 · Filter by author atharrva01 opened on Sep 30, 2026 · Q4/26
  

• Ledger drift checks: CheckLocalCompleteness re-parses full transaction history every sweep

  LFDT-Panurus/panurus#2425 · Filter by author atharrva01 opened on Sep 29, 2026 · Q4/26

• gocognit split: cmd/* tooling modules

  cleanuplint
  LFDT-Panurus/panurus#2389 · Filter by author atharrva01 opened on Sep 16, 2026 · Q4/26
  2

• gocognit split: integration module

  cleanuplint
  LFDT-Panurus/panurus#2388 · Filter by author atharrva01 opened on Sep 16, 2026 · Q4/26

• gocognit split: token/services misc (tokens, auditor, certifier, interop/htlc, driver)

  cleanuplint
  LFDT-Panurus/panurus#2387 · Filter by author atharrva01 opened on Sep 16, 2026 · Q4/26

• gocognit split: token/services/benchmark

  cleanuplint
  LFDT-Panurus/panurus#2386 · Filter by author atharrva01 opened on Sep 16, 2026 · Q4/26