Issues

• Carry decompiled C in the model (Function.decompiled) so heads read it offline

  CryptoJones/Scylla#57 · Filter by author CryptoJones opened on Sep 6, 2026

• MCP decompile tool — surface the engine-port decompile verb to agents

  CryptoJones/Scylla#56 · Filter by author CryptoJones opened on Sep 6, 2026

• [SCALE-P3-2] 64 KiB string truncation can silently collide long symbols (untrusted path only)

  CryptoJones/Scylla#48 · Filter by author CryptoJones opened on Jul 24, 2026

• [SCALE-P3-3] No multi-user server primitives — the growth path is blocked by three things at once

  CryptoJones/Scylla#49 · Filter by author CryptoJones opened on Jul 24, 2026

• [SCALE-P3-1] 1,000,000-function/-fact hard decode caps reject a very large corpus binary outright

  CryptoJones/Scylla#47 · Filter by author CryptoJones opened on Jul 24, 2026

• [SCALE-P2-3] In-memory decode fully materializes an owned Program — resident footprint is a multiple of file size, doubled transiently

  CryptoJones/Scylla#45 · Filter by author CryptoJones opened on Jul 24, 2026

• [SCALE-P2-2] No multi-artifact / corpus capability — every head is exactly one resident .scylla

  CryptoJones/Scylla#44 · Filter by author CryptoJones opened on Jul 24, 2026

• [SCALE-P2-1] Whole-artifact rewrite on every save — no atomic write, no locking → corruption + lost updates

  CryptoJones/Scylla#43 · Filter by author CryptoJones opened on Jul 24, 2026

• [SCALE-P1-2] The 512 MiB traversal ceiling caps the whole artifact — a legitimately large target fails to load

  CryptoJones/Scylla#41 · Filter by author CryptoJones opened on Jul 24, 2026

• [SCALE-P1-3] Warm-engine throughput is a hard single-digit ceiling; no horizontal scale-out

  CryptoJones/Scylla#42 · Filter by author CryptoJones opened on Jul 24, 2026

• [SCALE-P1-1] Every server head is single-threaded / single-shared-session — concurrent-analyst ceiling ≈ 1 active request

  CryptoJones/Scylla#40 · Filter by author CryptoJones opened on Jul 24, 2026

• [USE-P3-2] Annotate-verb param names and id types diverge

  CryptoJones/Scylla#38 · Filter by author CryptoJones opened on Jul 24, 2026

• [USE-P2-8] Endpoint scheme mismatch between the docs and the only working recipe

  CryptoJones/Scylla#35 · Filter by author CryptoJones opened on Jul 24, 2026

• [USE-P2-6] Config sprawl — ~20 SCYLLA_* env vars, documented in no single place

  CryptoJones/Scylla#33 · Filter by author CryptoJones opened on Jul 24, 2026

• [USE-P2-7] No schema version field — an incompatible artifact yields garbage or a bare "decode error"

  CryptoJones/Scylla#34 · Filter by author CryptoJones opened on Jul 24, 2026

• [USE-P2-4] MCP has no info tool

  CryptoJones/Scylla#32 · Filter by author CryptoJones opened on Jul 24, 2026

• [USE-P2-3] The advertised collaborate (git-for-RE) verb is reachable from no head

  CryptoJones/Scylla#31 · Filter by author CryptoJones opened on Jul 24, 2026

• [SEC-P3-4] producer provenance is unauthenticated free text

  CryptoJones/Scylla#28 · Filter by author CryptoJones opened on Jul 24, 2026

• [SEC-P3-1] LSP documentSymbol surfaces binary-derived names unwrapped

  CryptoJones/Scylla#25 · Filter by author CryptoJones opened on Jul 24, 2026

• [SEC-P2-4] DD-034 containment is advisory, not code-enforced

  CryptoJones/Scylla#24 · Filter by author CryptoJones opened on Jul 24, 2026

• [SEC-P2-3] Engine gRPC socket is world-accessible (chmod 777) with no channel auth

  CryptoJones/Scylla#23 · Filter by author CryptoJones opened on Jul 24, 2026

• [SEC-P2-2] Engine TCP mode is unauthenticated, plaintext, binds all interfaces, and is the Docker default

  CryptoJones/Scylla#22 · Filter by author CryptoJones opened on Jul 24, 2026

• [SEC-P1-2] GraphQL has no depth/complexity/alias limit — the expensive diff resolver is alias-amplifiable

  CryptoJones/Scylla#20 · Filter by author CryptoJones opened on Jul 24, 2026

• [PERF-P3-3] wasm links the full merge engine + serde_json for flat output; connect_engine re-dials per call

  CryptoJones/Scylla#18 · Filter by author CryptoJones opened on Jul 24, 2026

• [SEC-P1-1] collaborate derives trust from an untrusted artifact's self-asserted confidence — silent overwrite of local facts

  CryptoJones/Scylla#19 · Filter by author CryptoJones opened on Jul 24, 2026