Issues

• Decide and document which agent_vault exit paths a non-Active agent keeps

  contractsdocumentationsecurity
  ExcelDsigN-tech/DukaPay#865 · Filter by author ExcelDsigN-tech opened on Oct 21, 2026

• TTL follow-ups: multisig_governance read-path bumps and TTL tests for multisig, circuit_breaker and audit_anchor

  contractstests
  ExcelDsigN-tech/DukaPay#864 · Filter by author ExcelDsigN-tech opened on Oct 21, 2026

• Reorg rollback recompute ignores FloatTransferred when rebuilding agent float

  backendbug
  ExcelDsigN-tech/DukaPay#862 · Filter by author ExcelDsigN-tech opened on Oct 21, 2026

• [sdk] Client never refreshes sessions; logout-all and KYC are missing

  sdkseverity: mediumStellar Wave
  ExcelDsigN-tech/DukaPay#859 · Filter by author ExcelDsigN-tech opened on Oct 21, 2026
  7

  

• [sdk] Add score history, NFT and breakdown methods

  sdkseverity: lowStellar Wave
  ExcelDsigN-tech/DukaPay#858 · Filter by author ExcelDsigN-tech opened on Oct 21, 2026
  4

  

• [sdk] Add loan preview, schedule and event read methods

  sdkseverity: lowStellar Wave
  ExcelDsigN-tech/DukaPay#857 · Filter by author ExcelDsigN-tech opened on Oct 21, 2026
  7

  

• [sdk] Add missing loan and pool transaction builders

  sdkseverity: mediumStellar Wave
  ExcelDsigN-tech/DukaPay#856 · Filter by author ExcelDsigN-tech opened on Oct 21, 2026
  5

• [sdk] Add a privacy resource for DSAR requests

  sdkseverity: lowStellar Wave
  ExcelDsigN-tech/DukaPay#855 · Filter by author ExcelDsigN-tech opened on Oct 21, 2026
  5

• [sdk] Add a notifications resource

  sdkseverity: mediumStellar Wave
  ExcelDsigN-tech/DukaPay#854 · Filter by author ExcelDsigN-tech opened on Oct 21, 2026
  3

• [indexer] rpc.rs, sink.rs and metrics.rs have no unit tests

  indexerseverity: lowStellar Wavetests
  ExcelDsigN-tech/DukaPay#853 · Filter by author ExcelDsigN-tech opened on Oct 21, 2026
  3

• [backend] Agent dashboard publisher queries each agent in a loop and has no tests

  backendseverity: lowStellar Wavetests
  ExcelDsigN-tech/DukaPay#852 · Filter by author ExcelDsigN-tech opened on Oct 21, 2026
  3

• [backend] Webhook retries can be sent twice when runs overlap

  backendbugseverity: mediumStellar Wave
  ExcelDsigN-tech/DukaPay#851 · Filter by author ExcelDsigN-tech opened on Oct 21, 2026
  2

• [backend] transactionSimulationService has no tests

  backendseverity: lowStellar Wavetests
  ExcelDsigN-tech/DukaPay#850 · Filter by author ExcelDsigN-tech opened on Oct 21, 2026
  2

• [contracts] circuit_breaker admin setters have no tests

  contractsseverity: mediumStellar Wavetests
  ExcelDsigN-tech/DukaPay#848 · Filter by author ExcelDsigN-tech opened on Oct 21, 2026
  3

  

• [backend] tenantService has no tests

  backendseverity: mediumStellar Wavetests
  ExcelDsigN-tech/DukaPay#849 · Filter by author ExcelDsigN-tech opened on Oct 21, 2026
  3

  

• Indexer forward insert targets the loan_events view, which lacks address and loan term columns

  backendbug
  ExcelDsigN-tech/DukaPay#847 · Filter by author ExcelDsigN-tech opened on Oct 21, 2026

• Threat model for the loan_manager minimum repayment and dust threshold change (#727)

  documentationsecurity
  ExcelDsigN-tech/DukaPay#846 · Filter by author ExcelDsigN-tech opened on Oct 21, 2026

• Reconcile float transfers that land on-chain after the submit poll times out

  ExcelDsigN-tech/DukaPay#843 · Filter by author ExcelDsigN-tech opened on Oct 21, 2026

• Float transfers can stay in AWAITING_SIGNATURE forever

  ExcelDsigN-tech/DukaPay#842 · Filter by author ExcelDsigN-tech opened on Oct 21, 2026

• [backend] crossContractReconciler integration test mocks the database

  backendseverity: lowStellar Wave
  ExcelDsigN-tech/DukaPay#840 · Filter by author ExcelDsigN-tech opened on Oct 21, 2026
  7

  

• [ci] Semgrep, Trivy, npm audit and cargo audit only run on the weekly schedule

  cisecurityseverity: mediumStellar Wave
  ExcelDsigN-tech/DukaPay#839 · Filter by author ExcelDsigN-tech opened on Oct 21, 2026
  9

  

• [ci] CI installs rolling stable Rust but contracts pin 1.85.0, and CLAUDE.md says the opposite

  choreciseverity: lowStellar Wave
  ExcelDsigN-tech/DukaPay#838 · Filter by author ExcelDsigN-tech opened on Oct 21, 2026
  7

  

• [backend] Add DB-backed concurrency tests for float transfer initiation and approval

  backendseverity: mediumStellar Wavetests
  ExcelDsigN-tech/DukaPay#837 · Filter by author ExcelDsigN-tech opened on Oct 20, 2026
  11

  

• [contracts] audit_anchor unauthorized test accepts any error

  contractsseverity: lowStellar Wavetests
  ExcelDsigN-tech/DukaPay#822 · Filter by author ExcelDsigN-tech opened on Oct 20, 2026
  5

  

• [scripts] Deploy config check skips admin and token placeholders

  scriptsseverity: lowStellar Wave
  ExcelDsigN-tech/DukaPay#818 · Filter by author ExcelDsigN-tech opened on Oct 20, 2026
  7