Issues

• F10 Trigger confirmation: run the model on the triggers Tier 1 found

  detectionepic:f-tier2tier2
  defilantech/socair#284 · Filter by author Defilan opened on Oct 15, 2026 · M8 Tier 2

• An older socair verify refuses a report signed by a newer one (unknown field), so the compatibility rule needs stating before 0.1.0

  defilantech/socair#250 · Filter by author Defilan opened on Oct 14, 2026

• GitHub Action: scan, upload SARIF, and gate on the promotion state

  enhancementepic:e-surfacetier1
  defilantech/socair#204 · Filter by author Defilan opened on Oct 10, 2026 · M9 Enforce and file anywhere

• Serve the clean store as a read-only download endpoint (Hugging Face API and OCI)

  enhancementepic:d-airlocktier1
  defilantech/socair#201 · Filter by author Defilan opened on Oct 10, 2026 · M9 Enforce and file anywhere

• Admission gate for any serving stack: Kyverno and Sigstore policy-controller policies on the promotion state

  enhancementepic:d-airlocksecuritytier1
  defilantech/socair#200 · Filter by author Defilan opened on Oct 10, 2026 · M9 Enforce and file anywhere

• [STORY] Windows x64 release binaries

  enhancement
  defilantech/socair#191 · Filter by author Defilan opened on Oct 10, 2026

• B7 Reader hardening against known loader CVEs, and tokenizer integrity without a reference

  epic:b-readersecuritytier1
  defilantech/socair#166 · Filter by author Defilan opened on Oct 9, 2026

• B6 Formats batch: Keras, ONNX, config-as-code, joblib, SavedModel, wrappers, loader scripts

  epic:b-readersecuritytier1
  defilantech/socair#165 · Filter by author Defilan opened on Oct 9, 2026

• C12 Validated-structure payload scan inside tensor bytes

  detectionepic:c-checkssecuritytier1
  defilantech/socair#164 · Filter by author Defilan opened on Oct 9, 2026

• C11 Base-relative diff and claim consistency (identical, adapter-only, merge)

  epic:c-checkstier1
  defilantech/socair#163 · Filter by author Defilan opened on Oct 9, 2026

• B5 Tensor streaming and GGUF dequant, then lineage against a signed feed

  detectionepic:b-readerepic:c-checkstier1
  defilantech/socair#162 · Filter by author Defilan opened on Oct 9, 2026

• G4 Internal LEAD review: an organization clears a LEAD with a signed, named review

  epic:g-trusttier1
  defilantech/socair#158 · Filter by author Defilan opened on Oct 9, 2026
  1

• F9 Behavioral suites recorded as measurements (lm-eval, Inspect, garak)

  epic:f-tier2tier2
  defilantech/socair#157 · Filter by author Defilan opened on Oct 9, 2026 · M8 Tier 2

• F8 Refusal regression: safety behavior against the declared base model, measured locally

  detectionepic:f-tier2tier2
  defilantech/socair#156 · Filter by author Defilan opened on Oct 9, 2026 · M8 Tier 2

• F7 Quantization differential: the served format against full precision

  detectionepic:f-tier2tier2
  defilantech/socair#155 · Filter by author Defilan opened on Oct 9, 2026 · M8 Tier 2

• T16 Optional Sigstore signing modes (private and public keyless)

  epic:a-reporttier1
  defilantech/socair#86 · Filter by author Defilan opened on Oct 3, 2026 · M6.6 Trust primitives

• T14 Ingest Ollama manifests and blob layout

  epic:b-readerepic:d-airlocktier1
  defilantech/socair#76 · Filter by author Defilan opened on Oct 2, 2026 · M6.6 Trust primitives

• F3 Serving-stack differential (FloatDoor class)

  epic:f-tier2
  defilantech/socair#20 · Filter by author Defilan opened on Sep 29, 2026 · M8 Tier 2

• F2 Experimental backdoor scanner (BAIT or Haystack), advisory and LEAD-only

  epic:f-tier2tier2
  defilantech/socair#19 · Filter by author Defilan opened on Sep 29, 2026 · M8 Tier 2

• F1 In-cluster hostile sandbox for Tier 2

  epic:f-tier2tier2
  defilantech/socair#18 · Filter by author Defilan opened on Sep 29, 2026 · M8 Tier 2