Issues

Tracking: core sync — phase order and dependency chain

#60

· cuibonobo opened

on Aug 14, 2026

Decision: does the reference server seed the Schema Commons types?

#59

· cuibonobo opened

on Aug 14, 2026

Bounding query cost: run adapter queries off the request thread, answer 503 timeout past a deadline

#58

· cuibonobo opened

on Aug 14, 2026

Request size limits: 413 payload_too_large with a conforming body, declared as maxContentBytes

#56

· cuibonobo opened

on Aug 14, 2026

Discovery is incomplete: protocol version, auth advertisement, and the two size ceilings

#55

· cuibonobo opened

on Aug 14, 2026

DID challenge–response handshake: POST /auth/challenge and POST /auth/token

#53

· cuibonobo opened

on Aug 14, 2026

Polish batch: dead BASE_URL config, /records/query auth doc mismatch, fabricated token createdAt, unvalidated token entityId, silent ENTITY_ID mismatch, shutdown timeout

#49

· cuibonobo opened

on Jul 6, 2026

GET /attachments/:fileId error mapping: authenticated denials return 401, and every non-permission error collapses to 404

#48

· cuibonobo opened

on Jul 6, 2026

Query-input parsing: NaN limits reach the adapter, date filters skip validation, unchecked casts throughout

#47

· cuibonobo opened

on Jul 6, 2026

Attachment upload buffers the entire body in memory before the size check

#46

· cuibonobo opened

on Jul 6, 2026

Invalid bearer tokens are silently treated as anonymous instead of 401

#44

· cuibonobo opened

on Jul 6, 2026

Core sync: shed route-level policy special cases as core invariants land (core #59, #57, #65, #67)

#41

· cuibonobo opened

on Jul 6, 2026

Navigation Menu

Uh oh!

All issues

Tracking: core sync — phase order and dependency chain

Decision: does the reference server seed the Schema Commons types?

Bounding query cost: run adapter queries off the request thread, answer 503 timeout past a deadline

Request size limits: 413 payload_too_large with a conforming body, declared as maxContentBytes

Discovery is incomplete: protocol version, auth advertisement, and the two size ceilings

DID challenge–response handshake: POST /auth/challenge and POST /auth/token

Polish batch: dead BASE_URL config, /records/query auth doc mismatch, fabricated token createdAt, unvalidated token entityId, silent ENTITY_ID mismatch, shutdown timeout

GET /attachments/:fileId error mapping: authenticated denials return 401, and every non-permission error collapses to 404

Query-input parsing: NaN limits reach the adapter, date filters skip validation, unchecked casts throughout

Attachment upload buffers the entire body in memory before the size check

Invalid bearer tokens are silently treated as anonymous instead of 401

Core sync: shed route-level policy special cases as core invariants land (core #59, #57, #65, #67)

Uh oh!

Search results