Issues

• [Low] Harden Compose service runtime controls

  bug
  krishna3554/DMA#43 · Filter by author krishna3554 opened on Oct 3, 2026

• [Low] Disable API docs and OpenAPI endpoints in production

  bug
  krishna3554/DMA#42 · Filter by author krishna3554 opened on Oct 3, 2026

• [Medium] Adopt a shared frozen dependency lock for all release artifacts

  bug
  krishna3554/DMA#41 · Filter by author krishna3554 opened on Oct 3, 2026

• [Medium] Pin GitHub Actions by immutable commit SHA

  bug
  krishna3554/DMA#40 · Filter by author krishna3554 opened on Oct 3, 2026

• [Medium] Define encryption-at-rest and secure-deletion guarantees for SQLite

  bug
  krishna3554/DMA#39 · Filter by author krishna3554 opened on Oct 3, 2026

• [Medium] Require HTTPS for non-loopback SDK endpoints

  bug
  krishna3554/DMA#38 · Filter by author krishna3554 opened on Oct 3, 2026

• [High] Establish trust boundaries for retrieved agent memory

  bug
  krishna3554/DMA#37 · Filter by author krishna3554 opened on Oct 3, 2026

• [High] Enforce API-key entropy and reject placeholders in production

  bug
  krishna3554/DMA#36 · Filter by author krishna3554 opened on Oct 3, 2026

• [High] Bind API credentials to authorized agent IDs

  bug
  krishna3554/DMA#35 · Filter by author krishna3554 opened on Oct 3, 2026