Issues

• [contract] Decide and document whether pending withdrawal shares are reserved and priced at request time

  contractdocumentationStellar Wave
  Junirezz/YieldVault-RWA#1683 · Filter by author Junirezz opened on Oct 18, 2026
  2

• [contract] Add upper bounds to withdrawal cooldown and large-withdrawal threshold setters

  contractenhancementStellar Wave
  Junirezz/YieldVault-RWA#1682 · Filter by author Junirezz opened on Oct 18, 2026
  2

• [contract] Users have no way to cancel a pending large withdrawal

  contractenhancementStellar Wave
  Junirezz/YieldVault-RWA#1681 · Filter by author Junirezz opened on Oct 18, 2026
  6

  

• [contract] A second large withdrawal silently overwrites the pending one and restarts the timelock

  bugcontractStellar Wave
  Junirezz/YieldVault-RWA#1680 · Filter by author Junirezz opened on Oct 18, 2026
  5

  

• [contract] Rounding policy table names withdraw as assets-to-shares, but the vault withdraw is shares-in

  contractdocumentationStellar Wave
  Junirezz/YieldVault-RWA#1679 · Filter by author Junirezz opened on Oct 18, 2026
  5

  

• [backend] Configure express trust proxy explicitly so rate limits see real client IPs

  backendbugStellar Wave
  Junirezz/YieldVault-RWA#1678 · Filter by author Junirezz opened on Oct 18, 2026
  4

  

• [backend] Fail fast at startup when CORS_ALLOWED_ORIGINS is unset in production

  backendbugStellar Wave
  Junirezz/YieldVault-RWA#1677 · Filter by author Junirezz opened on Oct 18, 2026
  5

  

• [backend] No security headers are set (helmet is absent)

  backendenhancementStellar Wave
  Junirezz/YieldVault-RWA#1676 · Filter by author Junirezz opened on Oct 18, 2026
  3

  

• [backend] GracefulShutdownHandler is imported but never constructed; shutdown uses ad hoc signal handlers

  backendbugStellar Wave
  Junirezz/YieldVault-RWA#1675 · Filter by author Junirezz opened on Oct 18, 2026
  4

  

• [backend] Swagger UI and /docs/openapi.json are enabled by default in production

  backendenhancementStellar Wave
  Junirezz/YieldVault-RWA#1674 · Filter by author Junirezz opened on Oct 18, 2026
  10

  

• [general] Confirm dependabot.yml covers every package manifest in the repo

  enhancementgeneral
  Junirezz/YieldVault-RWA#1673 · Filter by author Junirezz opened on Oct 18, 2026

• [general] Document each root package.json script and what it checks

  documentationgeneral
  Junirezz/YieldVault-RWA#1672 · Filter by author Junirezz opened on Oct 18, 2026

• [general] Add an aggregate npm run validate script for the root validate:* scripts

  enhancementgeneral
  Junirezz/YieldVault-RWA#1671 · Filter by author Junirezz opened on Oct 18, 2026

• [general] Add a bug report template with affected package and severity fields

  enhancementgeneral
  Junirezz/YieldVault-RWA#1670 · Filter by author Junirezz opened on Oct 18, 2026

• [general] Verify CODEOWNERS covers every top-level directory

  enhancementgeneral
  Junirezz/YieldVault-RWA#1669 · Filter by author Junirezz opened on Oct 18, 2026

• [general] Reconcile TRIAGE_LABELS.md with the labels defined in the repository

  documentationgeneral
  Junirezz/YieldVault-RWA#1668 · Filter by author Junirezz opened on Oct 18, 2026

• [general] Generate an SBOM for release artifacts in release.yml

  enhancementgeneral
  Junirezz/YieldVault-RWA#1667 · Filter by author Junirezz opened on Oct 18, 2026

• [general] Add an npm license allow-list check for backend and frontend dependencies

  enhancementgeneral
  Junirezz/YieldVault-RWA#1666 · Filter by author Junirezz opened on Oct 18, 2026

• [general] Add a Markdown link checker to the docs workflow

  documentationgeneral
  Junirezz/YieldVault-RWA#1665 · Filter by author Junirezz opened on Oct 18, 2026

• [general] Add a spell check (cspell) for docs and Markdown with a project dictionary

  documentationgeneral
  Junirezz/YieldVault-RWA#1664 · Filter by author Junirezz opened on Oct 18, 2026

• [general] Enforce conventional commits with commitlint in the existing husky hook

  enhancementgeneral
  Junirezz/YieldVault-RWA#1663 · Filter by author Junirezz opened on Oct 18, 2026

• [general] Add a root docker-compose.yml for a full local stack

  enhancementgeneral
  Junirezz/YieldVault-RWA#1662 · Filter by author Junirezz opened on Oct 18, 2026

• [general] Add a root Makefile with install, test, lint and build targets

  enhancementgeneral
  Junirezz/YieldVault-RWA#1661 · Filter by author Junirezz opened on Oct 18, 2026

• [general] Start docs/adr with a template and record the existing architecture decisions

  documentationgeneral
  Junirezz/YieldVault-RWA#1660 · Filter by author Junirezz opened on Oct 18, 2026

• [general] Create docs/README.md as an index of the 112 documentation files

  documentationgeneral
  Junirezz/YieldVault-RWA#1659 · Filter by author Junirezz opened on Oct 18, 2026