Issues

• TUF recovery: snapshot-key rotation retains stale targets rollback floor

  marcohost33-maker/browser#57 · Filter by author marcohost33-maker opened on Sep 30, 2026

• TUF differential: signature keyid-to-role binding (tuf-offline.js:357) is unguarded by corpus and unit tests

  marcohost33-maker/browser#56 · Filter by author marcohost33-maker opened on Sep 30, 2026

• TUF client: verify local targets.json against root/snapshot on load; state the equal-timestamp policy vs spec 5.4.3.1

  marcohost33-maker/browser#55 · Filter by author marcohost33-maker opened on Sep 30, 2026

• P1 governance: enforce an always-run exact-head merge gate on main

  P1
  marcohost33-maker/browser#53 · Filter by author marcohost33-maker opened on Sep 29, 2026
  1

• TUF conformance phase: generic core adapter, profile oracle and algorithm decision

  marcohost33-maker/browser#47 · Filter by author marcohost33-maker opened on Sep 27, 2026
  2

• P0 architecture: define offline acquisition modes for foreign webapps

  critical-pathP0
  marcohost33-maker/browser#30 · Filter by author marcohost33-maker opened on Jul 14, 2026
  1

• P2 ADR-002: mirror tightened cosign signer-identity regexp from nigin-engine producer (Aegis #5 F1)

  P2security
  marcohost33-maker/browser#29 · Filter by author marcohost33-maker opened on Jul 14, 2026
  3

• P1 process: add duplicate-write idempotency guard for automation

  P2
  marcohost33-maker/browser#27 · Filter by author marcohost33-maker opened on Jul 14, 2026
  1

• P1 governance: T2 publisher admission, capability approval and emergency removal

  P1security
  marcohost33-maker/browser#25 · Filter by author marcohost33-maker opened on Jul 14, 2026
  1

• P0 package and secure-update spike: .swbn/IWA vs minimal signed package

  critical-pathP0
  marcohost33-maker/browser#24 · Filter by author marcohost33-maker opened on Jul 14, 2026
  12

• P0 T3 runtime spike: CEF Chrome Runtime vs Electron vs Full Chromium

  critical-pathP0
  marcohost33-maker/browser#23 · Filter by author marcohost33-maker opened on Jul 14, 2026
  2

• P0 reframe: native offline browser runtime, trust classes and isolation ADRs

  P0
  marcohost33-maker/browser#21 · Filter by author marcohost33-maker opened on Jul 13, 2026
  5

• P0 product discovery: primaerer Nutzer und falsifizierbare Wert-Entscheidung fuer die Offline-Laufzeit (Register D2)

  critical-pathP0
  marcohost33-maker/browser#14 · Filter by author marcohost33-maker opened on Jul 10, 2026
  3