Issues

• sec(scripts): DSN detector coverage audit and git-secrets scan-path inconsistencies (#24 part 2)

  effort/simpact/internalpriority/p3severity/lowtype/securityurgency/eventually
  LeanerCloud/cloud-commitments-mcp#58 · Filter by author cristim opened on Oct 12, 2026
  1

• sec(archera): verify archeraError masks the API key AFTER sanitizing (zero-width-split key can be reassembled)

  effort/xsimpact/fewpriority/p1severity/mediumtriagedtype/securityurgency/this-sprint
  LeanerCloud/cloud-commitments-mcp#56 · Filter by author cristim opened on Oct 12, 2026

• feat(mcp): USD spend cap on the execute path and a cumulative purchase budget

  effort/mimpact/all-userspriority/p1severity/hightriagedtype/featurgency/this-sprint
  LeanerCloud/cloud-commitments-mcp#51 · Filter by author cristim opened on Oct 9, 2026
  2

• fix(deps): adopt reviewed cloud-commitments-go purchase safeguards

  effort/simpact/fewpriority/p2severity/mediumtriagedtype/bugurgency/this-sprint
  LeanerCloud/cloud-commitments-mcp#35 · Filter by author cristim opened on Sep 29, 2026
  7

• docs(audit): README and NewServer comment overstate what the purchase audit log records

  LeanerCloud/cloud-commitments-mcp#27 · Filter by author cristim opened on Sep 28, 2026
  1

• chore(ci): medium/low findings from the 2026-07-28 full review [mcp part]

  effort/limpact/internalpriority/p3severity/lowtriagedtype/choreurgency/eventually
  LeanerCloud/cloud-commitments-mcp#23 · Filter by author cristim opened on Sep 27, 2026

• HYG-09: CHANGELOG.md is a stale, cross-repo-copied shared file [mcp part]

  effort/mimpact/internalpriority/p3severity/lowtriagedtype/docsurgency/eventually
  LeanerCloud/cloud-commitments-mcp#20 · Filter by author cristim opened on Sep 27, 2026
  1

• chore(tests): split Go test files above the 500-line ceiling [mcp part]

  effort/limpact/internalpriority/p3severity/lowtriagedtype/choreurgency/eventually
  LeanerCloud/cloud-commitments-mcp#18 · Filter by author cristim opened on Sep 27, 2026

• HYG: Replace 24 pre-existing em-dashes in CLAUDE.md (project rule) [mcp part]

  effort/simpact/internalpriority/p3severity/lowtriagedtype/docsurgency/eventually
  LeanerCloud/cloud-commitments-mcp#17 · Filter by author cristim opened on Sep 27, 2026

• HYG-08: CONTRIBUTING.md lists out-of-scope contribution areas [mcp part]

  effort/simpact/internalpriority/p3severity/lowtriagedtype/docsurgency/eventually
  LeanerCloud/cloud-commitments-mcp#15 · Filter by author cristim opened on Sep 27, 2026

• chore(tests): finish t.Parallel() adoption sweep across remaining packages [mcp part]

  effort/limpact/internalpriority/p3severity/lowtriagedtype/choreurgency/eventually
  LeanerCloud/cloud-commitments-mcp#14 · Filter by author cristim opened on Sep 27, 2026
  1

• sec: gitleaks .gitleaksignore has invalid/dead fingerprints; pre-commit test-exclusion gap [mcp part]

  bugeffort/xsimpact/internalpriority/p3severity/lowtriagedtype/choreurgency/eventually
  LeanerCloud/cloud-commitments-mcp#13 · Filter by author cristim opened on Sep 27, 2026

• HYG-06: .gitignore gaps for Makefile-produced root artifacts [mcp part]

  effort/xsimpact/internalpriority/p3severity/lowtriagedtype/choreurgency/eventually
  LeanerCloud/cloud-commitments-mcp#11 · Filter by author cristim opened on Sep 27, 2026

• chore(pre-commit): set default_install_hook_types so install arms both stages [mcp part]

  effort/xsimpact/internalpriority/p3severity/lowtriagedtype/choreurgency/eventually
  LeanerCloud/cloud-commitments-mcp#10 · Filter by author cristim opened on Sep 27, 2026

• Configure release environment reviewers + v* tag-protection ruleset

  effort/xsimpact/internalpriority/p2severity/mediumtriagedtype/choretype/securityurgency/this-sprint
  LeanerCloud/cloud-commitments-mcp#3 · Filter by author cristim opened on Sep 27, 2026
  2

• chore: prune monorepo residue left by the split (docs, pre-commit, CI)

  effort/simpact/internalpriority/p3severity/lowtriagedtype/choreurgency/eventually
  LeanerCloud/cloud-commitments-mcp#2 · Filter by author cristim opened on Sep 27, 2026

• feat(gcp): let real CUD purchases resolve the target project without a per-call gcp_project_id

  effort/mimpact/manypriority/p3severity/lowtriagedtype/featurgency/eventually
  LeanerCloud/cloud-commitments-mcp#6 · Filter by author cristim opened on Jul 27, 2026
  2

• feat(mcp): expose offering_class (standard vs convertible) on EC2 RI purchase tool

  effort/simpact/fewpriority/p3severity/lowtriagedtype/featurgency/eventually
  LeanerCloud/cloud-commitments-mcp#5 · Filter by author cristim opened on Jul 25, 2026
  1