All pull requests

Pull requests

• fix(hermes): fail closed when tirith cannot scan; pin subagent auto-approve off

  config
  #3473·POWERFULMOVES opened Nov 9, 2026Owner·

  ·
  5

• fix(website): rooms page + pillar-2 lab card + apple-touch-icon for production

  composedocsgovernance
  #3472·POWERFULMOVES opened Nov 7, 2026Owner·3 tasks done·

  ·
  16

• fix(make): supabase-bootstrap variants lose single-dollar expansions

  #3470·POWERFULMOVES opened Nov 6, 2026Owner·

  ·
  6

• fix(secrets): refuse to funnel ${VAR} refs and placeholders through the CHIT pipeline

  chit-awareconfigdocsgovernancesecrets-pipeline
  #3465·POWERFULMOVES opened Nov 6, 2026Owner·

  ·
  4

• fix(cipher): authenticated write-read round-trip probe; cipher-memory-smoke uses it

  docsgovernance
  #3463·POWERFULMOVES opened Nov 6, 2026Owner·

  ·
  2

• ci(ghcr): gate agent-zero :latest behind runtime verify + Trivy

  workflows
  #3461·POWERFULMOVES opened Nov 6, 2026Owner·

  ·
  10

• docs(pmoves-yt): note upstream yt-dlp 2026.10.26 release (no pin moved)

  #3450·github-actions[bot] opened Nov 2, 2026Bot·

  ·
  1

• chore(agent-zero): bump upstream to v2.15

  dependenciesupstream-update
  #3448·github-actions[bot] opened Nov 2, 2026Bot·10 tasks·

  ·
  2

• fix(claude): permission rules — drop mid-pattern *+:* mix + de-node runner rules (2.1.316 warns, rules matched nothing)

  docsgovernance
  #3444·POWERFULMOVES opened Nov 1, 2026Owner·

  ·
  6

• docs(ops): supabase key-rotation blast radius + refresh runbook

  docsgovernance
  #3443·POWERFULMOVES opened Nov 1, 2026Owner·

  ·
  10

• docs(agents): BoTZ is canonical, not archived — operator correction

  docsgovernance
  #3442·POWERFULMOVES opened Nov 1, 2026Owner·

  ·
  7

• docs(register): B850-CLAUDE restart handoff NOTE

  docsgovernance
  #3441·POWERFULMOVES opened Nov 1, 2026Owner·

  ·
  7

• docs(register): release docs/cipher-token-store-recovery lane

  docsgovernance
  #3439·POWERFULMOVES opened Oct 31, 2026Owner·

  ·
  6

• fix(activepieces): compose env defaults for ports + worker URL wiring

  compose
  #3437·POWERFULMOVES opened Oct 31, 2026Owner·

  ·
  6

• fix(cipher): service key mirrors Kong's consumer key; retire CIPHER_DB_SERVICE_KEY; add cipher-auth-check

  composedocssecrets-pipeline
  #3433·POWERFULMOVES opened Oct 30, 2026Owner·

  ·
  82

• feat(secrets): pydantic secret-shape rules + provider-auth verify

  configsecrets-pipeline
  #3432·POWERFULMOVES opened Oct 30, 2026Owner·

  ·
  3

• fix(security): Invidious keys required, no public literal defaults

  docssecrets-pipelineworkflows
  #3431·POWERFULMOVES opened Oct 30, 2026Owner·

  ·
  46

• feat(twin): standalone Agent Zero digital twin (ring model v2)

  docsservices
  #3426·POWERFULMOVES opened Oct 30, 2026Owner·

  ·
  18

• feat(ui): Cloudflare Pages sites in services External Dashboards

  #3425·POWERFULMOVES opened Oct 30, 2026Owner·

  ·
  4

• feat(ci): agent-zero-release-watch — automated upstream release bump PRs via GitHub App

  docsworkflows
  #3424·POWERFULMOVES opened Oct 30, 2026Owner·

  ·
  20

• chore(deps)(deps): bump the github-actions-minor-patch group across 1 directory with 13 updates

  cidependenciesworkflows
  #3420·dependabot[bot] opened Oct 28, 2026Bot·

  ·
  12

• docs(pmoves-yt): note upstream yt-dlp 2026.10.21 release (no pin moved)

  #3419·github-actions[bot] opened Oct 26, 2026Bot·

  ·
  1

• fix(clip/clap): disable hf-xet so embed weights actually download

  docs
  #3412·POWERFULMOVES opened Oct 22, 2026Owner·

  ·
  3

• fix(ingest): cap langextract chunks + extract-worker oversized guard (L1, draft)

  chit-awareservices
  #3407·POWERFULMOVES opened Oct 21, 2026Owner·5 tasks·

  ·
  4

• feat(models): local model layer map (runtime/HF/suit/demand) + local-model-fitness FlOO$

  config
  #3406·POWERFULMOVES opened Oct 21, 2026Owner·

  ·
  2