Issues

• Module enablement follow-ups from #198 review

  kernel
  DOS/Crove#199 · Filter by author JOY opened on Oct 16, 2026

• Org-less self revoke follow-ups from the #184 review

  security
  DOS/Crove#196 · Filter by author JOY opened on Oct 16, 2026

• Supabase Auth email budget is one bucket per deployment: one client can block confirmation and recovery emails for an hour

  authpriority:P2security
  DOS/Crove#190 · Filter by author JOY opened on Oct 15, 2026

• Invite mail limits: serialize the daily count and add a per-recipient cap

  kernel
  DOS/Crove#185 · Filter by author JOY opened on Oct 15, 2026

• sessions.revoke needs an org header, so SPA sign-out cannot revoke on onboarding/invite pages

  security
  DOS/Crove#184 · Filter by author JOY opened on Oct 15, 2026
  1

• MFA enforcement: fail closed when auth.mfa_factors is missing, and typed errors on apiFetch paths

  authpriority:P2security
  DOS/Crove#180 · Filter by author JOY opened on Oct 15, 2026
  1

• Run the definer hardening guard against hosted Supabase before the first Cloud deploy

  cloudpriority:P2security
  DOS/Crove#179 · Filter by author JOY opened on Oct 15, 2026 · Crove Cloud step 2
  1

• Verify the nightly canary workflow registers and runs

  priority:P3tooling
  DOS/Crove#174 · Filter by author JOY opened on Oct 15, 2026
  1

• Tenant reads of user_account go through definers before a second cell

  kernelpriority:P3
  DOS/Crove#169 · Filter by author JOY opened on Oct 15, 2026 · Foundations

• Reversal API route and UI, and what happens to a reversed purchase document

  financepriority:P1priority:P2web
  DOS/Crove#165 · Filter by author JOY opened on Oct 15, 2026
  4

• Bound refusal audit rows per actor (audit growth from refused requests)

  kernelpriority:P2security
  DOS/Crove#162 · Filter by author JOY opened on Oct 15, 2026
  1

• Proposal gate follow-ups from #159

  kernelpriority:P3security
  DOS/Crove#161 · Filter by author JOY opened on Oct 15, 2026
  1

• Phase 0b remainder: fast-check ledger model test and TT133 B01/B02 on sample data

  financepriority:P2spike
  DOS/Crove#154 · Filter by author JOY opened on Oct 15, 2026 · Phase 2a: Finance A1
  2

• Run AI conformance and extraction evals in CI on prompt and alias changes

  kernelowner-action
  DOS/Crove#153 · Filter by author JOY opened on Oct 15, 2026 · Foundations

• Prober alert de-duplication and verified webhook formats

  infrapriority:P3
  DOS/Crove#151 · Filter by author JOY opened on Oct 15, 2026

• Member invite follow-ups from #35

  authpriority:P2security
  DOS/Crove#134 · Filter by author JOY opened on Oct 15, 2026 · External-tenant gate
  1

• Remove the migrateJobs no-op once #104 is on main

  kernelpriority:P2tooling
  DOS/Crove#130 · Filter by author JOY opened on Oct 15, 2026

• Owner decision: Crove Cloud data residency in Vietnam

  cloudowner-actionpriority:P1
  DOS/Crove#122 · Filter by author JOY opened on Oct 15, 2026
  1

• Sealed context follow-ups (from the #116 review)

  kernelpriority:P2security
  DOS/Crove#117 · Filter by author JOY opened on Oct 15, 2026
  3

• Upload pipeline per plan 7.6: staging key, presigned URLs, generation in file references

  infrakernel
  DOS/Crove#109 · Filter by author JOY opened on Oct 15, 2026 · External-tenant gate
  1

• End-to-end run with api and worker as separate containers on S3 storage

  infra
  DOS/Crove#108 · Filter by author JOY opened on Oct 15, 2026 · External-tenant gate
  1

• Approve spend and add ANTHROPIC_API_KEY for the security reviewer agent

  owner-actionpriority:P1securitytooling
  DOS/Crove#95 · Filter by author JOY opened on Oct 15, 2026 · External-tenant gate

• Owner decision: keep the Crove brand or switch to Bexly

  DOS/Crove#80 · Filter by author JOY opened on Oct 14, 2026
  

• Implement ADR-0029 Phase 1: positions, agents, tasks and wake-ups (gate T18)

  DOS/Crove#79 · Filter by author JOY opened on Oct 14, 2026

• Shut down the legacy forks once the plan is final

  owner-actionpriority:P3
  DOS/Crove#70 · Filter by author JOY opened on Oct 14, 2026 · Later (Phase 3+)
  1