Issues

• smoke tests @latest release, not the PR branch's own packed tarball — coverage hole

  bigknoxy/HashPilot#202 · Filter by author bigknoxy opened on Sep 6, 2026
  2

• B72 — No dedicated redaction pattern for bare npm/Stripe-style tokens without adjacent variable names

  area:securityaudit-2026-08bugP3reported-unverified
  bigknoxy/HashPilot#173 · Filter by author bigknoxy opened on Sep 3, 2026 · Backlog
  6

• B71 — peaceiris/actions-gh-pages pinned to floating v3 tag in a write-token-holding job

  area:opsarea:securityaudit-2026-08bugP3reported-unverified
  bigknoxy/HashPilot#172 · Filter by author bigknoxy opened on Sep 3, 2026 · Backlog
  1

• B66 — Invalid or unreadable --config is silently dropped with no warning

  area:cliaudit-2026-08bugP3reported-unverified
  bigknoxy/HashPilot#167 · Filter by author bigknoxy opened on Sep 3, 2026 · Backlog
  2

• B64 — Lock reclaim trusts bare PID liveness, vulnerable to PID reuse after a crash

  area:correctnessaudit-2026-08bugP2reported-unverified
  bigknoxy/HashPilot#165 · Filter by author bigknoxy opened on Sep 3, 2026 · Sprint 3 — Parity
  1

• B63 — find-symbols (read-only) takes the same exclusive lock as mutating AST operations

  area:correctnessaudit-2026-08bugP2reported-unverified
  bigknoxy/HashPilot#164 · Filter by author bigknoxy opened on Sep 3, 2026 · Sprint 3 — Parity
  1

• B62 — add-import dedup uses unanchored substring match, false-refuses distinct Python/Rust imports

  area:correctnessaudit-2026-08bugP2verified
  bigknoxy/HashPilot#163 · Filter by author bigknoxy opened on Sep 3, 2026 · Sprint 3 — Parity
  1

• B61 — Hash-route read failures throw out of routeEdit instead of recording a failed result

  area:correctnessaudit-2026-08bugP2reported-unverified
  bigknoxy/HashPilot#162 · Filter by author bigknoxy opened on Sep 3, 2026 · Sprint 3 — Parity
  3

• B56 — tree-sitter has no linux-arm64 prebuild: install fails, and a missing binding kills every command with a stack trace

  area:opsaudit-2026-08P2
  bigknoxy/HashPilot#145 · Filter by author bigknoxy opened on Aug 24, 2026 · Sprint 3 — Parity
  1

• verify-changes reports overall: pass when zero checks ran

  bug
  bigknoxy/HashPilot#141 · Filter by author bigknoxy opened on Aug 20, 2026
  1

• add-import: bare module name yields misleading PARSE_ERROR instead of a usage error

  bug
  bigknoxy/HashPilot#140 · Filter by author bigknoxy opened on Aug 20, 2026
  1

• [P2] locking-multiprocess test is flaky — the proof of the multi-agent safety claim is unreliable

  bigknoxy/HashPilot#135 · Filter by author bigknoxy opened on Aug 20, 2026
  1

• Text renderers for ast capabilities and read-many emit placeholder output

  bigknoxy/HashPilot#133 · Filter by author bigknoxy opened on Aug 20, 2026
  1

• [strategy] Competitive watch: Scalpel MCP + agent-editing primitive landscape

  area:strategyP3
  bigknoxy/HashPilot#82 · Filter by author bigknoxy opened on Aug 18, 2026

• [release] Publish hashpilot-mcp on npm after #25 (MCP server)

  area:strategyP2
  bigknoxy/HashPilot#81 · Filter by author bigknoxy opened on Aug 18, 2026
  1

• [strategy] Expand AST language coverage beyond 6 (Java/C/Ruby/Kotlin/Swift) to match Scalpel

  area:strategyP3
  bigknoxy/HashPilot#80 · Filter by author bigknoxy opened on Aug 18, 2026

• [strategy] Add Codex CLI integration adapter (4th platform)

  area:strategyP2
  bigknoxy/HashPilot#79 · Filter by author bigknoxy opened on Aug 18, 2026

• [strategy] Adopt competitive positioning & analysis as the tracked strategy artifact

  area:strategyP2
  bigknoxy/HashPilot#78 · Filter by author bigknoxy opened on Aug 18, 2026

• [P3] Publish a config JSON Schema, add config validate and init

  area:cliaudit-2026-08enhancementP3reported-unverified
  bigknoxy/HashPilot#45 · Filter by author bigknoxy opened on Aug 10, 2026 · Backlog

• [P3] Shell completions, help examples, intent --schema, explain alias

  area:cliaudit-2026-08enhancementP3verified
  bigknoxy/HashPilot#44 · Filter by author bigknoxy opened on Aug 10, 2026 · Backlog

• [P3] intent parses every repo file twice, serially, on every invocation

  area:performanceaudit-2026-08P3reported-unverified
  bigknoxy/HashPilot#43 · Filter by author bigknoxy opened on Aug 10, 2026 · Backlog

• [P3] Pin tree-sitter deps, add Dependabot and vulnerability scanning

  area:securityaudit-2026-08P3reported-unverified
  bigknoxy/HashPilot#42 · Filter by author bigknoxy opened on Aug 10, 2026 · Backlog

• [P3] Installer: unverified template injection, unpinned clone, rc clobber, rsync --delete

  area:securityaudit-2026-08P3reported-unverified
  bigknoxy/HashPilot#37 · Filter by author bigknoxy opened on Aug 10, 2026 · Backlog

• [P2] LSP tier above AST for real cross-file reference resolution

  area:strategyaudit-2026-08enhancementP2
  bigknoxy/HashPilot#36 · Filter by author bigknoxy opened on Aug 10, 2026 · Sprint 4 — Differentiation

• [P2] CI: single OS, no typecheck, no smoke test, no installer test, no coverage

  area:opsaudit-2026-08P2reported-unverified
  bigknoxy/HashPilot#34 · Filter by author bigknoxy opened on Aug 10, 2026 · Sprint 3 — Parity